All pull requests

Pull requests

• Add unit tests for site-wide enabled providers settings

  #981·noruzzamans opened Sep 15, 2026·

  ·
  6

  

• Feature/enrollment onboarding

  #966·PassionateBytes opened Sep 2, 2026·

  ·

• Use site host in backup codes download title

  #964·faithcoder opened Aug 25, 2026·

  ·
  1

  6

• Fix empty backup code when appending codes for a user with none

  #958·faithcoder opened Aug 12, 2026·

  ·

  · 0.17.0
  1

  6

• Phpcs reduce ignores

  #955·peterwilsoncc opened Aug 10, 2026Collaborator·

  ·
  3

• Add REST provider management and server-owned TOTP enrollment

  #935·chubes4 opened Jul 22, 2026·

  ·
  3

  6

• Fix: Users list table fatals (wp_die) when a user's 2FA provider is deregistered

  #933·masteradhoc opened Jul 22, 2026Collaborator·

  ·

  · 0.17.0
  1

  5

  

• rework fail-safe

  #927·masteradhoc opened Jul 14, 2026Collaborator·

  ·

  · 0.17.0
  1

  4

  

• Persist third-party plugin $_POST fields across the 2FA login screen (Fixes #705)

  #925·chetanupare opened Jul 6, 2026·

  ·
  1

  9

• Fix #644: Expose existing 2FA revalidation flow to third-party plugins via action hook

  #924·chetanupare opened Jul 6, 2026·

  ·
  1

  6

• fix: reword mixed-audience login failure notice to be informational

  #922·dknauss opened Jul 3, 2026Contributor·

  ·

  · 0.17.0
  1

  19

  

• Improve rate-limit UX: calm error message and hide resend button during lockout

  #921·dknauss opened Jul 3, 2026Contributor·

  ·
  2

  1

• Move rate-limit check before provider pre-processing, preserve email token

  #917·dknauss opened Jul 3, 2026Contributor·

  ·

  · Future Release
  1

  3

  

• Enhancement: Add Passkeys (WebAuthn) support for Passwordless login & Passkey as 2FA.. (#779)

  #916·chetanupare opened Jun 30, 2026·

  ·

  · Future Release
  1

  1

• Add network-level provider settings for WordPress Multisite

  #915·faisalahammad opened Jun 30, 2026Contributor·

  ·

  · Future Release
  1

  3

• fix(auth): add self-service 2FA recovery for lost devices

  #914·faisalahammad opened Jun 29, 2026Contributor·

  ·
  1

  1

• Add Playground PR preview workflows

  #911·fellyph opened Jun 16, 2026·

  ·
  1

• #63: Fix HTML5 validation issues

  #910·masteradhoc opened Jun 15, 2026Collaborator·

  ·

  · 0.17.0
  1

  7

  

• add wp-config support to disable 2fa for a user

  #908·masteradhoc opened Jun 14, 2026Collaborator·

  ·

  · 0.17.0
  3

  

• #233: Add WP-CLI support with wp two-factor commands

  #905·masteradhoc opened Jun 14, 2026Collaborator·

  ·

  · 0.17.0
  1

  6

  

• fix: prevent autofilled TOTP codes from being wiped on login

  #904·faisalahammad opened Jun 11, 2026Contributor·

  ·

  · 0.17.0
  1

  8

  

• Update email provider token-message hooks

  #897·joemaller opened Jun 7, 2026·

  ·

  · 0.17.0
  1

  14

  

• replace wp-login.php to wp_login_url

  #886·masteradhoc opened May 4, 2026Collaborator·

  ·

  · 0.17.0
  1

  10

  

• Fix: respect intentional empty provider list from two_factor_enabled_providers_for_user filter

  #882·masteradhoc opened Apr 19, 2026Collaborator·

  ·

  · 0.17.0
  1

  6

  

• #838 update composer dev dependencies

  #863·PANawkar opened Mar 30, 2026·

  ·

  · 0.17.0
  1

  4