Limited-Time Offer

Get Extra 20% off on FullCharge Yearly Plan — available for first 10 users only. Don’t miss out! 🚀

TrackWP

FluentAuth · Version history

FluentAuth changelog and version history

Latest version
3.1.1
Nov 3, 2026 (6 days ago)
Releases
25
since 2022
In the last year
11
about one every 34 days
Tested up to
WordPress 7.1.4
PHP 7.3 or later

Releases each year

  • 20224 releases
  • 20232 releases
  • 20243 releases
  • 20257 releases
  • 20269 releases

20269 releases

  1. FluentAuth 3.1.1Latest

    • Fix: Magic link and signup email limits now work for visitors on IPv6.
    • Fix: The security scan now checks PHP files inside the node_modules folders of plugins and themes.
    • Fix: The passkey button on a login page left open after signing in now says the page has expired.
    • Fix: Some text boxes and buttons were hard to read in dark mode, and warning and info boxes in light mode.
    • Improvement: The PHP security warning now says your server “may” be affected when your host could have patched PHP without changing its version. Once your host confirms the patch, you can dismiss the warning.
    • Developer: New fluent_auth/email_verified action, fired when a magic link or an emailed code signs someone in.
    • Security: Hardening for sign-in links and codes, login attempts, trusted proxies, multisite permissions and deleted users.

  2. FluentAuth 3.1.0

    • New: Cloudflare Turnstile bot protection for the signup, login and password reset forms, and WooCommerce’s account forms.
    • New: A warning in wp-admin and on the dashboard when your server’s PHP has the critical php2shell security hole (CVE-2026-109618, CVE-2026-109619), with the PHP version to ask your host for.
    • Fix: Magic login links now work for Outlook, Hotmail and Live users. Microsoft’s link scanner opened the link first and used it up.
    • Improvement: The setup wizard offers passkeys and the summary report, and links to requiring two-factor.
    • Improvement: A summary report frequency chosen in the setup wizard starts counting from that day.
    • Improvement: Clearer admin text throughout, with notes for translators.
    • Fix: Switched-on toggles look on in dark mode.
    • Change: Scan reports to the FluentAuth Alerts Service now include your PHP and WordPress versions.

  3. FluentAuth 3.0.5

    • Fix: Names with a hyphen or an apostrophe, such as Mary-Jane or O’Brien, can now sign up.
    • Fix: Magic login links now sign you in on servers and proxies (such as Cloudflare) that redirect index.php addresses.
    • Fix: Magic login now works when Wordfence Login Security’s CAPTCHA is turned on.
    • Fix: Magic login links take you to the page you were heading to.
    • Fix: Social signup buttons now follow the form’s redirect and your Login Redirects settings, including on Fluent Support’s portal.
    • Fix: The Summary report setting shows “Do not send a summary” instead of a blank box.
    • Fix: The magic login success icon is centred on every theme.
    • Improvement: The signup form now shows dropdown fields added by other plugins, such as Fluent Support’s country field.
    • Developer: New LoginBridge::release() lets a plugin end its use of FluentAuth’s login form once it has drawn it.

  4. FluentAuth 3.0.4

    • Security: Sign-in redirects now always stay on your site.
    • Hardening: Signups through FluentAuth never create an administrator account, even if WordPress’s default role for new users is set to Administrator.
    • Change: Login and logout redirect settings only accept addresses on your site. An off-site address saved earlier is pointed out on the Login Redirects screen.
    • Improvement: New text files in the WordPress root (llms.txt, verification files, notes) are no longer reported by the security scan.
    • Fix: Accounts created through social login no longer use the email address as the username.
    • Fix: Security scan reports now match the final scan findings, including unexpected folders in the WordPress root.
    • Fix: The two-factor setup screen keeps the address it should return you to.

  5. FluentAuth 3.0.3

    • Added compatibility with MainWP and other plugins that sign users in programmatically. These sign ins are now recorded in the audit log as a programmatic login, collapsed into one entry per hour, and do not send a login notification email.
    • Fix: Signing in with Google One Tap or a passkey on a site that asks for a second factor now takes you to that step, instead of showing an error with no way forward.
    • Fix: Answering a second factor after signing in with a social account now returns you to the page you started from.
    • Improved user facing strings and error messages throughout.
    • The recovery help on the two-factor login screen now appears after 50 seconds.

  6. FluentAuth 3.0.2

    • Fix: Requiring two-factor no longer locks anybody out of wp-admin, or breaks front-end forms and add-to-cart for logged-in members.
    • Fix: Sites in other languages no longer report a WordPress core file as changed on every scan.
    • Fix: Recovery codes are shown only to the person they belong to, and setting up an authenticator app no longer replaces codes you have already saved.
    • Fix: Passkey setup on sites that use passkeys without authenticator apps, including retrying a prompt the server refused.
    • New: Tells you when another plugin is also enforcing two-factor login, since two of them cannot both finish a sign-in.
    • Improvement: Says when a scan could not reach WordPress.org, instead of going quiet.

  7. FluentAuth 3.0.1

    • Fix: Setup wizard switches could not be turned off.
    • Fix: Two-factor requirements now follow the method switches – a method that is off is off for everybody. Sites updating from 3.0.0 that required a factor with every method off keep working: the authenticator app is switched on for them automatically.
    • Fix: The dashboard reported two-factor as off on sites using passkeys without authenticator apps.
    • Fix: The login page designer can now edit the sign-in form’s own colours, and from name and reply-to apply to every email FluentAuth sends.
    • Improvement: Plain-language rewrite of the admin screens, plus fixes to activity log search, the encryption panel and sign-ins through third-party login forms.

  8. FluentAuth 3.0.0

    • New: Two-factor authentication with passkeys, authenticator apps and email codes. Pick which roles may set one up and which must have one, and how strong a required factor has to be. A required factor is now enrolled during sign-in, before a session is created, and everyone manages their own from t…
    • New: Passkey sign-in with no password at all, offered on the login form beside magic links and social login.
    • New: Security checklist that tells you what to fix and fixes most of it for you, covering HTTPS, debug output, the file editor, wp-config constants, backup files, uploads folder execution, drop-ins, mu-plugins, admin usernames, dormant admins and hidden users.
    • New: File change scanning for WordPress core, and for plugins and themes from the WordPress.org directory, with a side by side diff, a one click restore, and baseline snapshots for the files nothing else can verify.
    • New: Recovery tools for a site that has been broken into – sign everyone out, revoke application passwords, batched password resets, core and extension reinstall, and optional salt rotation, each one written to the audit log.
    • New: IP allow and block lists with a role restriction, real visitor IP detection behind a reverse proxy or Cloudflare, activity logging for plugin and theme changes, a guided setup wizard, and a LoginBridge service so another plugin can run its own login screen on FluentAuth’s flows.
    • Improved: Settings rebuilt around a sidebar and the admin UI refreshed throughout, with hardening across login attempts, magic login, social login, email smart codes and the alerts service – plus fixes for two-factor enrollment counts, dark mode, small screen layout and the password reset email lin…

  9. FluentAuth 2.1.2

    • Hardened Security Scan and Settings endpoints with stricter input validation and sanitization
    • Sanitized social auth redirect cookie to prevent storing untrusted values
    • Added client token verification in Google One-Tap login for stronger identity checks
    • Fixed: Magic Login rate limiter incorrectly using days instead of minutes
    • Fixed: Login issue with GitHub social authentication
    • Fixed: Timezone mismatch in dashboard quick stats and audit log time differences
    • Fixed: canLogin filter ignoring falsy return values (now respects developer overrides)
    • Fixed: Sprintf positional argument syntax in digest email and removed a duplicate filter
    • Improved: Translation readiness: wrapped previously hard-coded admin UI strings with the translation helper and fixed typos / awkward phrasing across the dashboard, settings, security scan, server mode, and email customization screens
    • Improved: Internal test coverage and codebase reliability

20257 releases

  1. FluentAuth 2.1.1

    • Introducing One-Tap Login via Google Social Auth Connection
    • Improved Translation & Localization
    • Security: Improved Data Security and Sanitization and compitable with latest WordPress security standards
    • Bug Fixes and Performance Improvements

  2. FluentAuth 2.1.0

  3. FluentAuth 2.0.3

    • Typo and Smartcode fixed on Custom Emails
    • WP_Error Notice fixed

  4. FluentAuth 2.0.2

    • Fixed: Login Redirect Issue
    • Fixed Typo on Admin Menu
    • Fixed Styling Issues

  5. FluentAuth 2.0.1

  6. FluentAuth 2.0.0

    • Introduing Login/Signup Page Customizer
    • Added Login with Facebook
    • Added Syststem Emails Custimizations
    • Introducing WordPress Core Files Integrity Check
    • Configurable: One-Click Login via Email as primary login method
    • UI & UX Improvements
    • Disable Signup on social media connection when global signup is disabled

  7. FluentAuth 1.1.0

    • Added hooks for 3rd party developers
    • Improvement on Authentication flow

20243 releases

  1. FluentAuth 1.0.8

    • Added Additional Hooks for Regsitration and Signup
    • Improved UI & UX
    • Fixed translation issues

  2. FluentAuth 1.0.7

    • Added Email verification on User Regstration Flow
    • PHP 8.x compatability issue fixed
    • JS errors fixed on Magic Links Shortcodes

  3. FluentAuth 1.0.6

    • Fix Compatibility issue with PHP 8.x
    • Upgrade Internal Libraries
    • Improved Login with Google
    • Improved UI & UX

20232 releases

  1. FluentAuth 1.0.5

    • Added Login or Signup with Google Social Auth Connection
    • Magic Login URL token is now hashed to improve the security

  2. FluentAuth 1.0.4

    • Added Daily/Weekly/Monthly Email reporting Feature
    • Made Login Form as Custom (no login url expose)
    • Two-Factor Authentication Improvement

20224 releases

  1. FluentAuth 1.0.3

  2. FluentAuth 1.0.2

    • Fix UI issue on dashboard
    • Login with GitHub improvement
    • Do Two-Factor Authentication even for social login for selected user roles
    • Added more hooks for developers
    • Improved UI & UX
    • Added feature to block /wp-admin access and hide admin bar for low-level user roles
    • Fix conflict issue with LearnDash and other wp-users REST-API
    • Improved IP Address for login verification.

  3. FluentAuth 1.0.1

  4. FluentAuth 1.0.0

    • Initial Release

Questions about FluentAuth’s releases

What is the latest version of FluentAuth?

3.1.1, released on Nov 3, 2026 (6 days ago). It’s tested up to WordPress 7.1.4 and needs PHP 7.3 or later.

How often is FluentAuth updated?

11 releases in the last year, about one every 34 days. Its first release on WordPress.org dates from December 2022.

Know when your rivals ship

Track your plugin and its rivals: TrackWP sees each new release in the nightly snapshot and alerts you, with what it did to their rank.

Start free

Release dates come from the day each version’s folder was made in FluentAuth’s WordPress.org SVN repository; the notes from its readme’s changelog, as its authors wrote it.