WebAuthn Provider for Two Factor · Version history
WebAuthn Provider for Two Factor changelog and version history
- Latest version
- 2.6.2
- Oct 15, 2026 (25 days ago)
- Releases
- 32
- since 2022
- In the last year
- 5
- about one every 59 days
- Tested up to
- WordPress 7.1.4
- PHP 8.2 or later
Releases each year
- 202215 releases
- 20233 releases
- 20245 releases
- 20254 releases
- 20265 releases
20265 releases
WebAuthn Provider for Two Factor 2.6.2Latest
- Strengthen protection of security key and passkey registration and sign-in attempts
- Expire pending registration and sign-in attempts after 10 minutes; restart the attempt if it expires
- Display error messages safely as plain text
- Fix renaming security keys on newer WordPress versions
WebAuthn Provider for Two Factor 2.6.1
- Compatibility with WordPress 6.9.4
- Refactor key management user interface
WebAuthn Provider for Two Factor 2.6.0
- Better support for passkeys
- Add hooks for logging errors
- Make plugin options more user-friendly
- Always show Retry button
- Update translations
WebAuthn Provider for Two Factor 2.5.6
- Fix authentication bypass with malformed request
- Additional hardening
WebAuthn Provider for Two Factor 2.5.5
- Compatibility with WordPress 6.9.1
20254 releases
WebAuthn Provider for Two Factor 2.5.4
- Platform requirements updated to PHP 8.1 and WordPress 6.0 (although the plugin still should work with older versions of PHP and WordPress)
- GH-1008: better integration with Two Factor 0.13.0
WebAuthn Provider for Two Factor 2.5.3
- Restore WebAuthn_Provider::get_instance() because WPVIP has an ancient version of Two Factor
WebAuthn Provider for Two Factor 2.5.2
- Fix the conflict when another package loads a library that has autoload.files key (see https://github.com/sjinks/wp-two-factor-provider-webauthn/pull/980)
WebAuthn Provider for Two Factor 2.5.1
- GH-898: do not show the UI if the plugin has failed to install its tables
- GH-972: do not show the profile UI if the provider is disabled
- drop official PHP 7.4 support
20245 releases
WebAuthn Provider for Two Factor 2.5.0
- iCloud support for Firefox (props dd32)
WebAuthn Provider for Two Factor 2.4.1
- GH-541: fix issues with YubiKeys (backported a patch by Markus Bauer from https://github.com/madwizard-org/webauthn-server/pull/23)
WebAuthn Provider for Two Factor 2.4.0
- GH-830: introduce webauthn_register_key_use_nicename filter (props kat3samsin)
WebAuthn Provider for Two Factor 2.3.0
- GH-827: Add webauthn_register_key_suppress_output filter
- GH-826: Add webauthn_app_id filter to customize U2F AppID
- GH-824: Initialize wpdb properties as early as possible
- Update madwizard/webauthn to 0.10.0
WebAuthn Provider for Two Factor 2.2.0
- Do not create user handles if they are not needed
- Add a hook to customize WebAuthN server
- Update dependencies
- Refactor tests
20233 releases
WebAuthn Provider for Two Factor 2.1.0
- GH-462: Use correct user ID when editing a user
- GH-456: Set relying party ID to COOKIE_DOMAIN if it is available (props dd32)
- Allow only for network-wide plugin activation (to match Two Factor)
WebAuthn Provider for Two Factor 2.0.3
- Update translations (thank you, Copilot)
- Add Ukrainian translation (thank you, Copilot)
WebAuthn Provider for Two Factor 2.0.2
- Update madwizard/webauthn to 0.9.0
- Update development dependencies
- Update E2E tests
202215 releases
WebAuthn Provider for Two Factor 2.0.1
- GH-295: fix client extensions validation
- Update development dependencies
WebAuthn Provider for Two Factor 2.0.0
- Put external dependencies into a unique namespace (GH-36, GH-53, GH-236)
- Update madwizard/webauthn to 0.8.0
- Update development dependencies
WebAuthn Provider for Two Factor 1.0.10
- Add zh-tw translations (props Chun-Chih Cheng, Alex Lion)
- GH-215, GH-33: Fix “Unable to save the key to the database” error for long public keys
- Update development dependencies
WebAuthn Provider for Two Factor 1.0.9
- Update madwizard/webauthn to 0.8.0
- Update development dependencies
- Add debug mode (activated with define( 'DEBUG_TFPWA', true );)
WebAuthn Provider for Two Factor 1.0.8
- Security: Update guzzlehttp/guzzle to 7.4.5 (fix CVE-2022-31090 and CVE-2022-31091)
- Do not load the plugin while WordPress is being installed
WebAuthn Provider for Two Factor 1.0.7.1
- Fix deployment issue. It’s time to automate the process
WebAuthn Provider for Two Factor 1.0.7
- GH-130: fix Network Installation issue
- Update development dependencies
- Add security-related workflows to CI
- Improve tests
WebAuthn Provider for Two Factor 1.0.6.1
- Fix deployment issue
WebAuthn Provider for Two Factor 1.0.6
WebAuthn Provider for Two Factor 1.0.5
WebAuthn Provider for Two Factor 1.0.4
WebAuthn Provider for Two Factor 1.0.3
WebAuthn Provider for Two Factor 1.0.2
WebAuthn Provider for Two Factor 1.0.1
WebAuthn Provider for Two Factor 1.0.0
Questions about WebAuthn Provider for Two Factor’s releases
What is the latest version of WebAuthn Provider for Two Factor?
2.6.2, released on Oct 15, 2026 (3 weeks ago). It’s tested up to WordPress 7.1.4 and needs PHP 8.2 or later.
How often is WebAuthn Provider for Two Factor updated?
5 releases in the last year, about one every 59 days. Its first release on WordPress.org dates from January 2022.
Know when your rivals ship
Track your plugin and its rivals: TrackWP sees each new release in the nightly snapshot and alerts you, with what it did to their rank.
Start freeRelease dates come from the day each version’s folder was made in WebAuthn Provider for Two Factor’s WordPress.org SVN repository; the notes from its readme’s changelog, as its authors wrote it.