Limited-Time Offer

Get Extra 20% off on FullCharge Yearly Plan — available for first 10 users only. Don’t miss out! 🚀

TrackWP

Two Factor (2FA) Authentication via Email · Version history

Two Factor (2FA) Authentication via Email changelog and version history

Latest version
1.9.12
Oct 21, 2026 (19 days ago)
Releases
15
since 2024
In the last year
4
about one every 41 days
Tested up to
WordPress 7.1.4
PHP 5.6 or later

Releases each year

  • 20248 releases
  • 20253 releases
  • 20264 releases

20264 releases

  1. Two Factor (2FA) Authentication via Email 1.9.12Latest

    • Fix: Dismissing admin notices now always saves, even if they’re closed before the page finishes loading
    • Fix: The Unicorn Panel logo is now bundled with the plugin instead of loaded from an external site

  2. Two Factor (2FA) Authentication via Email 1.9.11

    • Fix: Login link tokens are now hex-encoded so firewalls/WAFs no longer mistakenly flag them as malicious and block the login link. Existing links remain valid until they expire.
    • Fix: Miscellaneous Plugin Check fixes.

  3. Two Factor (2FA) Authentication via Email 1.9.10

    • Security hardening. Please update ASAP.
    • New: XML-RPC logins are now blocked for accounts that have the “2FA for REST API” option enabled (matching the existing REST API behaviour). Accounts that have never set that option are unaffected.
    • New: The standard wp_login action now fires when a user completes 2FA via the email link, so integrations that rely on it (last-login trackers, login-alert emails, activity logs) work correctly.
    • Added child theme support for custom templates. ss88-2fa/login-email.php and ss88-2fa/2fa-page.php are now loaded from the child theme first, then the parent theme. Thanks @gstricklind!
    • Added filters SS88_2FAVE_email_template and SS88_2FAVE_page_template so developers can load the templates from any location.
    • Fix: The custom email template could fail to load if more than one 2FA email was sent in the same request.
    • Compatibility: Tested up to WordPress 7.1.

  4. Two Factor (2FA) Authentication via Email 1.9.9

    • Please update ASAP. Security Fix: CVE-2025-13587
    • Removal of logo on 2FA Login Screen

20253 releases

  1. Two Factor (2FA) Authentication via Email 1.9.8

    • Thank you for 10,000+ active installations! 🙂
    • Fix: REST API authentication

  2. Two Factor (2FA) Authentication via Email 1.9.7

    • PHP Warning fix on new user

  3. Two Factor (2FA) Authentication via Email 1.9.6

    • Integrated Initialization Vector
    • Canged Cipher to AES-256-CBC
    • Added ‘pretty formatting’ when token decrption fails

20248 releases

  1. Two Factor (2FA) Authentication via Email 1.9.5

    • UX improvement: Refresh 2FA Page with countdown when user is sucessfully logged in

  2. Two Factor (2FA) Authentication via Email 1.9.4

    • Improved header_remove() function by only removing Set-Cookie

  3. Two Factor (2FA) Authentication via Email 1.9.3

    • A new constant has been integrated which can be added in wp-config.php to override individual user settings to force 2FA to be enabled for Contributors. Add SS88_2FAVE_ENABLE_CONTRIBUTORS to your wp-config.php i.e. define('SS88_2FAVE_ENABLE_CONTRIBUTORS', true);.

  4. Two Factor (2FA) Authentication via Email 1.9.2

    • Added PHP’s header_remove(); function upon logging in. Seems to solve 502 ad 503 issues, especially with GoDaddy.

  5. Two Factor (2FA) Authentication via Email 1.9.1

    • A new filter SS88_2FAVE_custom_redirect was added. You can now override the final URL where users are redirect to after sucessfully logging in. See example in FAQs.
    • A new filter SS88_2FAVE_isEnabled was added. You can now override if 2FA is enabled. See example in FAQs.

  6. Two Factor (2FA) Authentication via Email 1.9

    • The REST API (by default) has 2FA enabled. There are now new settings to disable it on an individual user basis by using the user edit screen.
    • A new constant SS88_2FAVE_API_DISABLE_ALL was added to completely disable the 2FA on the REST API.

  7. Two Factor (2FA) Authentication via Email 1.8

    • Added 1.7.1 to trunk in WP Plugin Directory for rollback compatibility
    • We are now using $priority 1 on the wp_login hook
    • Added theme/folder compatibility. As of v1.4 developers could add ss88-2fa-page.php to their theme directory. We now support an additional directory ss88-2fa i.e. wp-content/themes/xxx/ss88-2fa/2fa-page.php. v1.4 functionality will be removed in a future release in favor for the new directory ss88-…
    • Added support for advanced developers to use a custom 2FA email. You can now override the 2FA email by copying assets/html/login-email.php to your theme’s directory. Upload this file to wp-content/themes/xxx/ss88-2fa/login-email.php to customize it!

  8. Two Factor (2FA) Authentication via Email 1.7.1

    • A new constant has been integrated which can be added in wp-config.php to override individual user settings to force 2FA to be enabled for Subscribers. Add SS88_2FAVE_ENABLE_SUBSCRIBERS to your wp-config.php i.e. define('SS88_2FAVE_ENABLE_SUBSCRIBERS', true);.

Questions about Two Factor (2FA) Authentication via Email’s releases

What is the latest version of Two Factor (2FA) Authentication via Email?

1.9.12, released on Oct 21, 2026 (2 weeks ago). It’s tested up to WordPress 7.1.4 and needs PHP 5.6 or later.

How often is Two Factor (2FA) Authentication via Email updated?

4 releases in the last year, about one every 41 days. Its first release on WordPress.org dates from May 2024.

Know when your rivals ship

Track your plugin and its rivals: TrackWP sees each new release in the nightly snapshot and alerts you, with what it did to their rank.

Start free

Release dates come from the day each version’s folder was made in Two Factor (2FA) Authentication via Email’s WordPress.org SVN repository; the notes from its readme’s changelog, as its authors wrote it.