List view

TOTP: Switch to an internal QR Code provider.

TOTPTime-based One-time PasswordsTime-based One-time Passwords

Status: Closed (completed).

#42 In WordPress/two-factor;

· by georgestephanis was closed on Nov 8, 2022

Add a workflow for reporting security issues

Status: Closed (completed).

#328 In WordPress/two-factor;

· by kasparsd was closed on Oct 19, 2022

Prevent other plugins from accidentally circumventing two factor authentication

CompatibilityCompatibility with other plugins, Core, back-compatCompatibility with other plugins, Core, back-compat

Status: Closed (completed).

#385 In WordPress/two-factor;

· by kkmuffme was closed on Feb 6, 2023

Using auth_cookie filter instead of wp_login hook to start 2FA flow

CompatibilityCompatibility with other plugins, Core, back-compatCompatibility with other plugins, Core, back-compat

Status: Closed (completed).

#406 In WordPress/two-factor;

· by nathanrona was closed on Feb 6, 2023

Release version 0.8.0

Status: Closed (completed).

#533 In WordPress/two-factor;

· by jeffpaul was closed on May 22, 2023

Download backup code doesn't generate working download link in french

Backup Codes

Status: Closed (completed).

#460 In WordPress/two-factor;

· by sarcand was closed on Nov 28, 2022

Throttle second factor attempts

Help Wanted

Status: Closed (completed).

#477 In WordPress/two-factor;

· by iandunn was closed on Feb 24, 2023

Maybe add a filter hook for the TOTP QR code URL

TOTPTime-based One-time PasswordsTime-based One-time Passwords

Status: Closed (completed).

#443 In WordPress/two-factor;

· by roytanck was closed on Nov 8, 2022

TOTP: Ajaxy Goodness.

JS Focus

TOTPTime-based One-time PasswordsTime-based One-time Passwords

Status: Closed (completed).

Enhancement

#43 In WordPress/two-factor;

· by georgestephanis was closed on Sep 5, 2025

Generate QR codes internally

Status: Closed (abandoned).

WordPress/two-factornumber 388

#388 In WordPress/two-factor;

· by mallorydxw was closed on Nov 8, 2022

Add Security Policy

Documentation

Status: Merged (completed).

WordPress/two-factornumber 481

#481 In WordPress/two-factor;

· by iandunn was closed on Oct 19, 2022

Tests: Explicitly ignore directories for performance

PHPPull requests that update Php codePull requests that update Php code

Status: Merged (completed).

WordPress/two-factornumber 474

#474 In WordPress/two-factor;

· by iandunn was closed on Oct 14, 2022

Harden login nonces

PHPPull requests that update Php codePull requests that update Php code

Status: Merged (completed).

WordPress/two-factornumber 473

#473 In WordPress/two-factor;

· by iandunn was closed on Oct 24, 2022

Tests: Migrate config to 9.5 format

Status: Merged (completed).

WordPress/two-factornumber 475

#475 In WordPress/two-factor;

· by iandunn was closed on Oct 14, 2022

Core: Reset compromised passwords after 2FA failures

Status: Merged (completed).

WordPress/two-factornumber 482

#482 In WordPress/two-factor;

· by iandunn was closed on Feb 24, 2023

Increase TOTP coverage

Status: Merged (completed).

WordPress/two-factornumber 469

#469 In WordPress/two-factor;

· by iandunn was closed on Oct 12, 2022

Update PHPUnit, Install phpunit-watcher

Status: Merged (completed).

WordPress/two-factornumber 472

#472 In WordPress/two-factor;

· by iandunn was closed on Oct 12, 2022

Block creating authentication cookies when inappropriate to do so.

Status: Closed (abandoned).

WordPress/two-factornumber 490

#490 In WordPress/two-factor;

· by dd32 was closed on Jan 5, 2023

Generate QR codes locally with JS

Status: Merged (completed).

WordPress/two-factornumber 487

#487 In WordPress/two-factor;

· by iandunn was closed on Nov 8, 2022

Fix Backup code download with quotes in translations

Status: Merged (completed).

WordPress/two-factornumber 494

#494 In WordPress/two-factor;

· by dd32 was closed on Nov 28, 2022

Register the TOTP QR generation script on the front-end.

Status: Merged (completed).

WordPress/two-factornumber 495

#495 In WordPress/two-factor;

· by dd32 was closed on Nov 18, 2022

Bump loader-utils from 2.0.2 to 2.0.4

DependenciesPull requests that update a dependency filePull requests that update a dependency file

JavaScriptPull requests that update Javascript codePull requests that update Javascript code

Status: Merged (completed).

WordPress/two-factornumber 496

#496 In WordPress/two-factor;

· by dependabot was closed on Mar 6, 2023

Bump json5 from 1.0.1 to 1.0.2

DependenciesPull requests that update a dependency filePull requests that update a dependency file

JavaScriptPull requests that update Javascript codePull requests that update Javascript code

Status: Merged (completed).

WordPress/two-factornumber 506

#506 In WordPress/two-factor;

· by dependabot was closed on Mar 6, 2023

Block sending authentication cookies upon 2FA login

Status: Merged (completed).

WordPress/two-factornumber 502

#502 In WordPress/two-factor;

· by dd32 was closed on Jan 5, 2023

Use the Rest API for setting up individual providers

Status: Merged (completed).

WordPress/two-factornumber 504

#504 In WordPress/two-factor;

· by dd32 was closed on Feb 6, 2023