Limited-Time Offer

Get Extra 20% off on FullCharge Yearly Plan — available for first 10 users only. Don’t miss out! 🚀

WebAuthn Provider for Two Factor · Version history

WebAuthn Provider for Two Factor changelog and version history

Latest version
2.6.2
Oct 15, 2026 (25 days ago)
Releases
32
since 2022
In the last year
5
about one every 59 days
Tested up to
WordPress 7.1.4
PHP 8.2 or later

Releases each year

  • 202215 releases
  • 20233 releases
  • 20245 releases
  • 20254 releases
  • 20265 releases

20265 releases

  1. WebAuthn Provider for Two Factor 2.6.2Latest

    • Strengthen protection of security key and passkey registration and sign-in attempts
    • Expire pending registration and sign-in attempts after 10 minutes; restart the attempt if it expires
    • Display error messages safely as plain text
    • Fix renaming security keys on newer WordPress versions
  2. WebAuthn Provider for Two Factor 2.6.1

    • Compatibility with WordPress 6.9.4
    • Refactor key management user interface
  3. WebAuthn Provider for Two Factor 2.6.0

    • Better support for passkeys
    • Add hooks for logging errors
    • Make plugin options more user-friendly
    • Always show Retry button
    • Update translations
  4. WebAuthn Provider for Two Factor 2.5.6

    • Fix authentication bypass with malformed request
    • Additional hardening
  5. WebAuthn Provider for Two Factor 2.5.5

    • Compatibility with WordPress 6.9.1

20254 releases

  1. WebAuthn Provider for Two Factor 2.5.4

    • Platform requirements updated to PHP 8.1 and WordPress 6.0 (although the plugin still should work with older versions of PHP and WordPress)
    • GH-1008: better integration with Two Factor 0.13.0
  2. WebAuthn Provider for Two Factor 2.5.3

    • Restore WebAuthn_Provider::get_instance() because WPVIP has an ancient version of Two Factor
  3. WebAuthn Provider for Two Factor 2.5.2

    • Fix the conflict when another package loads a library that has autoload.files key (see https://github.com/sjinks/wp-two-factor-provider-webauthn/pull/980)
  4. WebAuthn Provider for Two Factor 2.5.1

    • GH-898: do not show the UI if the plugin has failed to install its tables
    • GH-972: do not show the profile UI if the provider is disabled
    • drop official PHP 7.4 support

20245 releases

  1. WebAuthn Provider for Two Factor 2.5.0

    • iCloud support for Firefox (props dd32)
  2. WebAuthn Provider for Two Factor 2.4.1

    • GH-541: fix issues with YubiKeys (backported a patch by Markus Bauer from https://github.com/madwizard-org/webauthn-server/pull/23)
  3. WebAuthn Provider for Two Factor 2.4.0

    • GH-830: introduce webauthn_register_key_use_nicename filter (props kat3samsin)
  4. WebAuthn Provider for Two Factor 2.3.0

    • GH-827: Add webauthn_register_key_suppress_output filter
    • GH-826: Add webauthn_app_id filter to customize U2F AppID
    • GH-824: Initialize wpdb properties as early as possible
    • Update madwizard/webauthn to 0.10.0
  5. WebAuthn Provider for Two Factor 2.2.0

    • Do not create user handles if they are not needed
    • Add a hook to customize WebAuthN server
    • Update dependencies
    • Refactor tests

20233 releases

  1. WebAuthn Provider for Two Factor 2.1.0

    • GH-462: Use correct user ID when editing a user
    • GH-456: Set relying party ID to COOKIE_DOMAIN if it is available (props dd32)
    • Allow only for network-wide plugin activation (to match Two Factor)
  2. WebAuthn Provider for Two Factor 2.0.3

    • Update translations (thank you, Copilot)
    • Add Ukrainian translation (thank you, Copilot)
  3. WebAuthn Provider for Two Factor 2.0.2

    • Update madwizard/webauthn to 0.9.0
    • Update development dependencies
    • Update E2E tests

202215 releases

  1. WebAuthn Provider for Two Factor 2.0.1

    • GH-295: fix client extensions validation
    • Update development dependencies
  2. WebAuthn Provider for Two Factor 2.0.0

    • Put external dependencies into a unique namespace (GH-36, GH-53, GH-236)
    • Update madwizard/webauthn to 0.8.0
    • Update development dependencies
  3. WebAuthn Provider for Two Factor 1.0.10

    • Add zh-tw translations (props Chun-Chih Cheng, Alex Lion)
    • GH-215, GH-33: Fix “Unable to save the key to the database” error for long public keys
    • Update development dependencies
  4. WebAuthn Provider for Two Factor 1.0.9

    • Update madwizard/webauthn to 0.8.0
    • Update development dependencies
    • Add debug mode (activated with define( 'DEBUG_TFPWA', true );)
  5. WebAuthn Provider for Two Factor 1.0.8

    • Security: Update guzzlehttp/guzzle to 7.4.5 (fix CVE-2022-31090 and CVE-2022-31091)
    • Do not load the plugin while WordPress is being installed
  6. WebAuthn Provider for Two Factor 1.0.7.1

    • Fix deployment issue. It’s time to automate the process
  7. WebAuthn Provider for Two Factor 1.0.7

    • GH-130: fix Network Installation issue
    • Update development dependencies
    • Add security-related workflows to CI
    • Improve tests
  8. WebAuthn Provider for Two Factor 1.0.6.1

    • Fix deployment issue
  9. WebAuthn Provider for Two Factor 1.0.6

  10. WebAuthn Provider for Two Factor 1.0.5

  11. WebAuthn Provider for Two Factor 1.0.4

  12. WebAuthn Provider for Two Factor 1.0.3

  13. WebAuthn Provider for Two Factor 1.0.2

  14. WebAuthn Provider for Two Factor 1.0.1

  15. WebAuthn Provider for Two Factor 1.0.0

Questions about WebAuthn Provider for Two Factor’s releases

What is the latest version of WebAuthn Provider for Two Factor?

2.6.2, released on Oct 15, 2026 (3 weeks ago). It’s tested up to WordPress 7.1.4 and needs PHP 8.2 or later.

How often is WebAuthn Provider for Two Factor updated?

5 releases in the last year, about one every 59 days. Its first release on WordPress.org dates from January 2022.

Know when your rivals ship

Track your plugin and its rivals: TrackWP sees each new release in the nightly snapshot and alerts you, with what it did to their rank.

Start free

Release dates come from the day each version’s folder was made in WebAuthn Provider for Two Factor’s WordPress.org SVN repository; the notes from its readme’s changelog, as its authors wrote it.