0.18.0

Issues

• Add support for encrypting TOTP secrets

  Enhancement

  WordPress/two-factor#455 · Filter by author jeffpaul opened on Sep 9, 2022 · 0.18.0
  8

  

• Add ability to re-encrypt secrets

  Help Wanted
  Enhancement

  WordPress/two-factor#456 · Filter by author jeffpaul opened on Sep 9, 2022 · 0.18.0
  5

  

• Backup codes are saved before user intends

  Backup Codes
  Bug

  WordPress/two-factor#507 · Filter by author iandunn opened on Jan 25, 2023 · 0.18.0
  7

• Add: Site-wide Two-Factor enforcement per user role

  Unread
  WordPress/two-factor#845·masteradhoc opened Mar 21, 2026 · Updated Nov 3, 2026
  28

  

• Allow site administrators to enforce 2FA for specific user roles

  WordPress/two-factor#846 · Filter by author masteradhoc opened on Mar 21, 2026 · 0.18.0
  1

  

• add wp-config support to disable 2fa for a user

  Unread
  WordPress/two-factor#908·masteradhoc opened Jun 14, 2026 · Updated Sep 26, 2026
  6

  

• Add personal data exporter

  Unread
  WordPress/two-factor#997·faisalahammad opened Sep 25, 2026 · Updated Nov 10, 2026
  26

  

• Add REST provider management and server-owned TOTP enrollment

  Unread
  WordPress/two-factor#935·chubes4 opened Jul 22, 2026 · Updated Oct 18, 2026
  7

  

• Persist third-party plugin $_POST fields across the 2FA login screen (Fixes #705)

  Unread
  WordPress/two-factor#925·chetanupare opened Jul 6, 2026 · Updated Sep 28, 2026
  9

  

• Fix #644: Expose existing 2FA revalidation flow to third-party plugins via action hook

  Unread
  WordPress/two-factor#924·chetanupare opened Jul 6, 2026 · Updated Nov 1, 2026
  7

  

• Store TOTP secrets with the WordPress Secrets API

  Unread
  WordPress/two-factor#1010·ericmann opened Sep 29, 2026 · Updated Oct 9, 2026
  29

  

• add fallback feature and error page

  Unread
  WordPress/two-factor#1016·masteradhoc opened Oct 5, 2026 · Updated Nov 5, 2026·Draft
  1

  

• Make Two-Factor provider settings network-wide on Multisite

  Unread
  WordPress/two-factor#1024·masteradhoc opened Oct 17, 2026 · Updated Oct 18, 2026·Draft
  1

  

• Add personal data eraser

  Unread
  WordPress/two-factor#1026·faisalahammad opened Oct 18, 2026 · Updated Oct 18, 2026
  4

  

• Fix fatal error when the stored TOTP secret is not base32

  Unread
  WordPress/two-factor#1038·faisalahammad opened Nov 9, 2026 · Updated Nov 9, 2026
  2