All pull requests

Pull requests

• Make authcode auto-submit opt-out via data-no-auto-submit

  #1036·faisalahammad opened Nov 1, 2026Contributor·

  ·
  1

• Add personal data eraser

  #1026·faisalahammad opened Oct 18, 2026Contributor·

  ·

  · 0.18.0
  1

  4

  

• Require TOTP secrets set up via REST to be 20 to 128 bytes

  #1025·masteradhoc opened Oct 17, 2026Collaborator·

  ·

  · 0.18.0
  4

  

• Make Two-Factor provider settings network-wide on Multisite

  #1024·masteradhoc opened Oct 17, 2026Collaborator·

  ·

  · 0.18.0
  1

  1

  

• fix: generate TOTP secret on demand instead of on profile load

  #1021·faisalahammad opened Oct 7, 2026Contributor·

  ·

  · Future Release
  1

  1

  

• add fallback feature and error page

  #1016·masteradhoc opened Oct 5, 2026Collaborator·

  ·

  · 0.18.0
  1

  

• Store TOTP secrets with the WordPress Secrets API

  #1010·ericmann opened Sep 29, 2026Collaborator·

  ·

  · 0.18.0
  1

  29

  

• Add a reusable save method and settings page URL filter

  #1007·faisalahammad opened Sep 28, 2026Contributor·

  ·

  · Future Release
  1

  10

  

• fix(core): snapshot provider resolution per request

  #1006·faisalahammad opened Sep 28, 2026Contributor·

  ·

  · Future Release
  1

  3

  

• Add two_factor_auto_submit_authcode filter to disable authcode auto-submission

  #1005·kasparsd opened Sep 28, 2026Collaborator·

  ·

  · 0.18.0
  1

  26

  

• #953 - Email account owner when two-factor settings change

  #1001·masteradhoc opened Sep 27, 2026Collaborator·

  ·

  · 0.18.0
  1

  14

  

• Add personal data exporter

  #997·faisalahammad opened Sep 25, 2026Contributor·

  ·

  · 0.18.0
  1

  20

  

• Add REST provider management and server-owned TOTP enrollment

  #935·chubes4 opened Jul 22, 2026·

  ·

  · 0.18.0
  3

  7

  

• Persist third-party plugin $_POST fields across the 2FA login screen (Fixes #705)

  #925·chetanupare opened Jul 6, 2026·

  ·

  · 0.18.0
  1

  9

  

• Fix #644: Expose existing 2FA revalidation flow to third-party plugins via action hook

  #924·chetanupare opened Jul 6, 2026·

  ·

  · 0.18.0
  1

  7

  

• Enhancement: Add Passkeys (WebAuthn) support for Passwordless login & Passkey as 2FA.. (#779)

  #916·chetanupare opened Jun 30, 2026·

  ·

  · Future Release
  1

  1

  

• fix(auth): add self-service 2FA recovery for lost devices

  #914·faisalahammad opened Jun 29, 2026Contributor·

  ·

  · Future Release
  1

  1

  

• add wp-config support to disable 2fa for a user

  #908·masteradhoc opened Jun 14, 2026Collaborator·

  ·

  · 0.18.0
  6

  

• Add: Site-wide Two-Factor enforcement per user role

  #845·masteradhoc opened Mar 21, 2026Collaborator·

  ·

  · 0.18.0
  1

  26

  

• Add email verification before activation

  #788·faisalahammad opened Feb 13, 2026Contributor·

  ·

  · Future Release
  1

  27

  

• Broadcast events for logging, email notifications, etc

  #526·iandunn opened Feb 17, 2023Member·

  ·

  · Future Release
  8

  

• Add logging function when failed to authenticate

  Needs Code Review
  #462·Lucisu opened Oct 4, 2022·

  ·

  · Future Release
  1

  22

  

• Support WebAuthn

  WebAuthn
  #427·mcguffin opened Jan 21, 2022·

  ·

  · Future Release
  1

  66