All pull requests

Pull requests

• Fix HTML-encoded site titles in TOTP issuer

  #1023·ozenyunus35 opened Oct 11, 2026·

  ·

  · 0.18.0
  1

  2

  

• fix: generate TOTP secret on demand instead of on profile load

  #1021·faisalahammad opened Oct 7, 2026Contributor·

  ·
  1

  1

• add fallback feature and error page

  #1016·masteradhoc opened Oct 5, 2026Collaborator·

  ·
  1

• Email users about low recovery codes and redirect to regenerate after the last one

  #1015·masteradhoc opened Oct 2, 2026Collaborator·

  ·

  · 0.18.0
  2

  

• Restore minimum WordPress requirement to 6.8

  #1013·kasparsd opened Oct 2, 2026Collaborator·

  ·
  1

  10

  

• Store TOTP secrets with the WordPress Secrets API

  #1010·ericmann opened Sep 29, 2026Collaborator·

  ·

  · 0.18.0
  1

  29

  

• Add a reusable save method and settings page URL filter

  #1007·faisalahammad opened Sep 28, 2026Contributor·

  ·

  · Future Release
  1

  9

  

• fix(core): snapshot provider resolution per request

  #1006·faisalahammad opened Sep 28, 2026Contributor·

  ·

  · Future Release
  1

  1

  

• Add two_factor_auto_submit_authcode filter to disable authcode auto-submission

  #1005·kasparsd opened Sep 28, 2026Collaborator·

  ·

  · 0.18.0
  1

  3

  

• #953 - Email account owner when two-factor settings change

  #1001·masteradhoc opened Sep 27, 2026Collaborator·

  ·

  · 0.18.0
  1

  1

  

• Add personal data exporter and eraser

  #997·faisalahammad opened Sep 25, 2026Contributor·

  ·

  · 0.18.0
  1

  8

  

• Add unit tests for site-wide enabled providers settings

  #981·noruzzamans opened Sep 15, 2026·

  ·

  · 0.18.0
  7

  

• Feature/enrollment onboarding

  #966·PassionateBytes opened Sep 2, 2026·

  ·

  · Future Release
  2

  

• Phpcs reduce ignores

  #955·peterwilsoncc opened Aug 10, 2026Collaborator·

  ·

  · 0.18.0
  3

  

• Add REST provider management and server-owned TOTP enrollment

  #935·chubes4 opened Jul 22, 2026·

  ·

  · 0.18.0
  3

  6

  

• Persist third-party plugin $_POST fields across the 2FA login screen (Fixes #705)

  #925·chetanupare opened Jul 6, 2026·

  ·

  · 0.18.0
  1

  9

  

• Fix #644: Expose existing 2FA revalidation flow to third-party plugins via action hook

  #924·chetanupare opened Jul 6, 2026·

  ·

  · 0.18.0
  1

  6

  

• Enhancement: Add Passkeys (WebAuthn) support for Passwordless login & Passkey as 2FA.. (#779)

  #916·chetanupare opened Jun 30, 2026·

  ·

  · Future Release
  1

  1

  

• Add network-level provider settings for WordPress Multisite

  #915·faisalahammad opened Jun 30, 2026Contributor·

  ·

  · Future Release
  1

  3

  

• fix(auth): add self-service 2FA recovery for lost devices

  #914·faisalahammad opened Jun 29, 2026Contributor·

  ·

  · Future Release
  1

  1

  

• add wp-config support to disable 2fa for a user

  #908·masteradhoc opened Jun 14, 2026Collaborator·

  ·

  · 0.18.0
  6

  

• Update email provider token-message hooks

  #897·joemaller opened Jun 7, 2026·

  ·

  · 0.18.0
  1

  18

  

• Add: Site-wide Two-Factor enforcement per user role

  #845·masteradhoc opened Mar 21, 2026Collaborator·

  ·

  · 0.18.0
  1

  20

  

• Add email verification before activation

  #788·faisalahammad opened Feb 13, 2026Contributor·

  ·

  · Future Release
  1

  27

  

• Playwright setup

  #713·sudip-md opened Aug 29, 2025·

  ·

  · Future Release
  1

  12