List view

Optionally Force 2fa

Status: Open (in progress).

WordPress/two-factornumber 239

#239 In WordPress/two-factor;

· mikeselander opened on Sep 3, 2018

Support WebAuthn

WebAuthn

Status: Open (in progress).

WordPress/two-factornumber 427

#427 In WordPress/two-factor;

· mcguffin opened on Jan 21, 2022

Add logging function when failed to authenticate

Needs Code Review

Status: Open (in progress).

WordPress/two-factornumber 462

#462 In WordPress/two-factor;

· Lucisu opened on Oct 4, 2022

Add email verification before activation

Status: Open (in progress).

WordPress/two-factornumber 788

#788 In WordPress/two-factor;

· faisalahammad opened on Feb 13, 2026

Email: Also email a 'Login Link' the user can just click.

Emailed Codes

Status: Open.

Enhancement

#50 In WordPress/two-factor;

· georgestephanis opened on Sep 7, 2015

Passwordless login | Login with emailed link

Emailed Codes

Status: Open.

Enhancement

#449 In WordPress/two-factor;

· jasperf opened on Jul 20, 2022

Custom login form input fields dropped during two-factor challenge

Status: Open.

Bug

#705 In WordPress/two-factor;

· westonruter opened on Jul 9, 2025

Require verification before activating Email TOTP

Status: Open.

Enhancement

#778 In WordPress/two-factor;

· masteradhoc opened on Feb 4, 2026

Add Passkeys Support

Status: Open.

Enhancement

#779 In WordPress/two-factor;

· masteradhoc opened on Feb 4, 2026

Support W3C Web Authentication (WebAuthn)

WebAuthn

Status: Open.

Enhancement

#232 In WordPress/two-factor;

· jcjones opened on May 10, 2018

Enforce 2FA

Status: Open.

Enhancement

#255 In WordPress/two-factor;

· kasparsd opened on Oct 22, 2018

Log or alert on failed 2FA codes

Status: Open.

Enhancement

#459 In WordPress/two-factor;

· jeffpaul opened on Sep 20, 2022

Add e2e tests for critical paths

Developer Tooling

Status: Open.

Task

#497 In WordPress/two-factor;

· iandunn opened on Nov 18, 2022

Backup codes are saved before user intends

Backup Codes

Status: Open.

Bug

#507 In WordPress/two-factor;

· iandunn opened on Jan 25, 2023

Revalidation: Prompted immediately after setting up 2FA

Status: Open.

Bug

#572 In WordPress/two-factor;

· dd32 opened on May 25, 2023

Upgrade dependencies

Status: Open.

#838 In WordPress/two-factor;

· masteradhoc opened on Mar 14, 2026

Encrypt TOTP secrets at rest using AES-256-GCM

Status: Open (in progress).

WordPress/two-factornumber 819

#819 In WordPress/two-factor;

· ericmann opened on Mar 3, 2026

Add support for encrypting TOTP secrets

Status: Open.

Enhancement

#455 In WordPress/two-factor;

· jeffpaul opened on Sep 9, 2022

Add ability to re-encrypt secrets

Help Wanted

Status: Open.

Enhancement

#456 In WordPress/two-factor;

· jeffpaul opened on Sep 9, 2022

Add hook to turn off auto-submission of 2FA form

Status: Open.

Enhancement

#723 In WordPress/two-factor;

· eric-michel opened on Nov 13, 2025

added filter to control whether authcode autosubmits

Status: Open (in progress).

WordPress/two-factornumber 741

#741 In WordPress/two-factor;

· eric-michel opened on Dec 18, 2025

Add: Site-wide Two-Factor enforcement per user role

Status: Open (in progress).

WordPress/two-factornumber 845

#845 In WordPress/two-factor;

· masteradhoc opened on Mar 21, 2026

Alternative to #741 - Autosubmit Tweak

Status: Open (in progress).

WordPress/two-factornumber 820

#820 In WordPress/two-factor;

· georgestephanis opened on Mar 4, 2026

Fix Codecov badge by adding OIDC permission for tokenless upload

Status: Open (in progress).

WordPress/two-factornumber 856

#856 In WordPress/two-factor;

· nimesh-xecurify opened on Mar 28, 2026

#838 update composer dev dependencies

Status: Open (in progress).

WordPress/two-factornumber 863

#863 In WordPress/two-factor;

· PANawkar opened on Mar 30, 2026