List view

Add plugin settings

Status: Open.

Enhancement

#249 In WordPress/two-factor;

· kasparsd opened on Sep 21, 2018

TOTP setup: Update Profile saves enabled-providers without validating TOTP key exists

TOTPTime-based One-time PasswordsTime-based One-time Passwords

Status: Open.

Bug

#797 In WordPress/two-factor;

· dknauss opened on Feb 16, 2026

Silent fallback to recovery codes when TOTP key is missing

Status: Open.

Bug

#796 In WordPress/two-factor;

· dknauss opened on Feb 16, 2026

Add hook to turn off auto-submission of 2FA form

Status: Open.

Enhancement

#723 In WordPress/two-factor;

· eric-michel opened on Nov 13, 2025

Add support for encrypting TOTP secrets

Status: Open.

Enhancement

#455 In WordPress/two-factor;

· jeffpaul opened on Sep 9, 2022

Add ability to re-encrypt secrets

Help Wanted

Status: Open.

Enhancement

#456 In WordPress/two-factor;

· jeffpaul opened on Sep 9, 2022

added filter to control whether authcode autosubmits

Status: Open (in progress).

WordPress/two-factornumber 741

#741 In WordPress/two-factor;

· eric-michel opened on Dec 18, 2025

fix: Ensure two-factor methods are fully configured before enabling them

Status: Open (in progress).

WordPress/two-factornumber 798

#798 In WordPress/two-factor;

· kasparsd opened on Feb 17, 2026

Activating multiple methods is confusing and can fail silently

Status: Open.

Enhancement

#157 In WordPress/two-factor;

· simonwheatley opened on Mar 27, 2017

Jetpack SSO bypasses local 2FA (regression in 0.15.0)

Status: Open.

#811 In WordPress/two-factor;

· kraftbj opened on Feb 24, 2026

Encrypt TOTP secrets at rest using AES-256-GCM

Status: Open (in progress).

WordPress/two-factornumber 819

#819 In WordPress/two-factor;

· ericmann opened on Mar 3, 2026