Issues

• 0.17.0 not compatable with 6.8? Regarding CVE-2026-100508

  WordPress/two-factor#1012 · Filter by author Xilonz opened on Oct 2, 2026
  7

• Privacy: register a personal data exporter and eraser

  WordPress/two-factor#954 · Filter by author dknauss opened on Aug 9, 2026

• Enrolling a second factor destroys the user's other sessions and sends no notification

  WordPress/two-factor#953 · Filter by author dknauss opened on Aug 9, 2026 · 0.18.0
  

• Conflict between Two Factor (v0.16.0) and Login with Google plugin

  WordPress/two-factor#951 · Filter by author masteradhoc opened on Aug 5, 2026
  1

• Password managers can capture the TOTP setup QR and lock users out of login

  Emailed CodesTOTP
  WordPress/two-factor#945 · Filter by author dknauss opened on Jul 25, 2026
  3

• Keep authentication fail-closed when provider filters change between lookups

  WordPress/two-factor#943 · Filter by author chubes4 opened on Jul 23, 2026

• Recovery-code REST route accepts nonexistent users

  WordPress/two-factor#937 · Filter by author chubes4 opened on Jul 23, 2026

• Reject oversized TOTP confirmation codes before validation

  WordPress/two-factor#936 · Filter by author chubes4 opened on Jul 22, 2026

• Expose provider management and server-owned TOTP enrollment over REST

  WordPress/two-factor#934 · Filter by author chubes4 opened on Jul 22, 2026
  1

• Roadmap: Account recovery after losing a second factor

  WordPress/two-factor#909 · Filter by author masteradhoc opened on Jun 14, 2026
  1

  

• Add network-level provider settings for WordPress Multisite

  Enhancement

  WordPress/two-factor#894 · Filter by author acer2021lg opened on May 20, 2026 · Future Release

• Allow site administrators to enforce 2FA for specific user roles

  WordPress/two-factor#846 · Filter by author masteradhoc opened on Mar 21, 2026 · 0.18.0
  1

  

• Setup Onboarding Login-Flow (for Enforce 2FA)

  Help Wanted
  Enhancement

  WordPress/two-factor#813 · Filter by author masteradhoc opened on Feb 24, 2026 · Future Release
  3

• Add Passkeys Support

  Enhancement

  WordPress/two-factor#779 · Filter by author masteradhoc opened on Feb 4, 2026 · Future Release
  7

• Require verification before activating Email TOTP

  Enhancement

  WordPress/two-factor#778 · Filter by author masteradhoc opened on Feb 4, 2026 · Future Release

• Add hook to turn off auto-submission of 2FA form

  Enhancement

  WordPress/two-factor#723 · Filter by author eric-michel opened on Nov 13, 2025 · 0.18.0
  3

  

• Custom login form input fields dropped during two-factor challenge

  Bug

  WordPress/two-factor#705 · Filter by author westonruter opened on Jul 9, 2025 · Future Release
  2

• Woocommerce 2FA settings implementation

  WordPress/two-factor#704 · Filter by author opicron opened on Jul 6, 2025 · Future Release
  8

• Hooks to support requesting 2FA for plugins extending two-factor core functionality

  Compatibility
  Enhancement

  WordPress/two-factor#644 · Filter by author jeffpaul opened on Oct 17, 2024 · Future Release
  1

• Stuck on revalidate now loop

  Bug

  WordPress/two-factor#629 · Filter by author igorradovanov opened on Aug 31, 2024 · Future Release
  6

• Account recovery after losing 2fa key

  Enhancement

  WordPress/two-factor#621 · Filter by author Clorith opened on Jul 30, 2024
  4

• Warn if recovery mode available

  Enhancement

  WordPress/two-factor#509 · Filter by author iandunn opened on Feb 1, 2023 · Future Release
  4

• Backup codes are saved before user intends

  Backup Codes
  Bug

  WordPress/two-factor#507 · Filter by author iandunn opened on Jan 25, 2023 · 0.18.0
  7

• Add e2e tests for critical paths

  Developer Tooling
  Task

  WordPress/two-factor#497 · Filter by author iandunn opened on Nov 18, 2022
  7

  

• Notify user/admin when sensitive events occur

  Enhancement

  WordPress/two-factor#476 · Filter by author iandunn opened on Oct 14, 2022 · Future Release