List view

Add plugin settings

Status: Open.

Enhancement

#249 In WordPress/two-factor;

· kasparsd opened on Sep 21, 2018

TOTP setup: Update Profile saves enabled-providers without validating TOTP key exists

TOTPTime-based One-time PasswordsTime-based One-time Passwords

Status: Open.

Bug

#797 In WordPress/two-factor;

· dknauss opened on Feb 16, 2026

Silent fallback to recovery codes when TOTP key is missing

Status: Open.

Bug

#796 In WordPress/two-factor;

· dknauss opened on Feb 16, 2026

Add hook to turn off auto-submission of 2FA form

Status: Open.

Enhancement

#723 In WordPress/two-factor;

· eric-michel opened on Nov 13, 2025

Add support for encrypting TOTP secrets

Status: Open.

Enhancement

#455 In WordPress/two-factor;

· jeffpaul opened on Sep 9, 2022

Add ability to re-encrypt secrets

Help Wanted

Status: Open.

Enhancement

#456 In WordPress/two-factor;

· jeffpaul opened on Sep 9, 2022

added filter to control whether authcode autosubmits

Status: Open (in progress).

WordPress/two-factornumber 741

#741 In WordPress/two-factor;

· eric-michel opened on Dec 18, 2025

fix: Ensure two-factor methods are fully configured before enabling them

Status: Open (in progress).

WordPress/two-factornumber 798

#798 In WordPress/two-factor;

· kasparsd opened on Feb 17, 2026

Activating multiple methods is confusing and can fail silently

Status: Open.

Enhancement

#157 In WordPress/two-factor;

· simonwheatley opened on Mar 27, 2017

Jetpack SSO bypasses local 2FA (regression in 0.15.0)

Status: Open.

#811 In WordPress/two-factor;

· kraftbj opened on Feb 24, 2026

Encrypt TOTP secrets at rest using AES-256-GCM

Status: Open (in progress).

WordPress/two-factornumber 819

#819 In WordPress/two-factor;

· ericmann opened on Mar 3, 2026

Bump svgo from 3.3.2 to 3.3.3

DependenciesPull requests that update a dependency filePull requests that update a dependency file

JavaScriptPull requests that update Javascript codePull requests that update Javascript code

Status: Open (in progress).

WordPress/two-factornumber 824

#824 In WordPress/two-factor;

· dependabot opened on Mar 5, 2026

Bump immutable from 5.1.3 to 5.1.5

DependenciesPull requests that update a dependency filePull requests that update a dependency file

JavaScriptPull requests that update Javascript codePull requests that update Javascript code

Status: Open (in progress).

WordPress/two-factornumber 823

#823 In WordPress/two-factor;

· dependabot opened on Mar 4, 2026

[468] Improves test coverage and reliability

Status: Open (in progress).

WordPress/two-factornumber 825

#825 In WordPress/two-factor;

· nimesh-xecurify opened on Mar 9, 2026

Test coverage seems low

Developer Tooling

Status: Open.

Enhancement

#468 In WordPress/two-factor;

· iandunn opened on Oct 10, 2022

Bump simple-git from 3.28.0 to 3.33.0

DependenciesPull requests that update a dependency filePull requests that update a dependency file

JavaScriptPull requests that update Javascript codePull requests that update Javascript code

Status: Open (in progress).

WordPress/two-factornumber 826

#826 In WordPress/two-factor;

· dependabot opened on Mar 10, 2026

Plugins Page: Settings Link to wrong anchor

Status: Open.

#827 In WordPress/two-factor;

· cclambie opened on Mar 11, 2026

fix wrong settings link anchor

Status: Open (in progress).

WordPress/two-factornumber 828

#828 In WordPress/two-factor;

· masteradhoc opened on Mar 11, 2026

Small typos & i18n updates

Status: Open (in progress).

WordPress/two-factornumber 829

#829 In WordPress/two-factor;

· masteradhoc opened on Mar 11, 2026

fix accessbility issues

Status: Open (in progress).

WordPress/two-factornumber 830

#830 In WordPress/two-factor;

· masteradhoc opened on Mar 11, 2026

Alternative to #741 - Autosubmit Tweak

Status: Open (in progress).

WordPress/two-factornumber 820

#820 In WordPress/two-factor;

· georgestephanis opened on Mar 4, 2026

Playground PR review support for two-factor

Status: Open (in progress).

WordPress/two-factornumber 836

#836 In WordPress/two-factor;

· masteradhoc opened on Mar 13, 2026

#831 Fix nonce verification in 2FA flow

Status: Open (in progress).

WordPress/two-factornumber 833

#833 In WordPress/two-factor;

· PANawkar opened on Mar 12, 2026

Upgrade dependencies

Status: Open.

#838 In WordPress/two-factor;

· masteradhoc opened on Mar 14, 2026

Bump @tootallnate/once and @wordpress/scripts

DependenciesPull requests that update a dependency filePull requests that update a dependency file

JavaScriptPull requests that update Javascript codePull requests that update Javascript code

Status: Open (in progress).

WordPress/two-factornumber 839

#839 In WordPress/two-factor;

· dependabot opened on Mar 16, 2026