AuthPress icon indicating copy to clipboard operation
AuthPress copied to clipboard

Add 2-factor authentication to your WordPress blog site.

Results 11 AuthPress issues
Sort by recently updated
recently updated
newest added

Hey, I want to report a corner case. We have enforced 2FA for a select list of roles. But the user is able to log in without 2FA if, 1....

# What Happened Not all user data was sanitized before being used. This PR goes through all the places where data that could be misused was not properly handled. #...

chore

Because one of my goals is to add more providers, the name "WP Google Authenticator" won't be very accurate anymore. Actually, it is already not very accurate: I am using...

Update textdomain to enable WordPress.org localization system (GlotPress). See #26 for prerequisites.

enhancement

The current activation workflow is based on one principle that might have to be revised. At the moment, 2FA activation and secret key generation are two different actions. This is...

enhancement

Following all the latest changes, I believe it is time for a UI overhaul in order to improve the user experience. By developing the plugin with many other plugins enabled...

enhancement

So, after enabling this plugin network-wide on a multisite installation, I ran into several issues. The first was that the TOTP field wasn't being added to the login page. From...

Right now, if a user ignores the 2FA requirement until the login timeout is reached, they are locked out entirely and unable to log in. Instead, if they log in...

Some users have been in a situation where they were unable to get the OTP from their phone or there was a time sync issue preventing them to login using...

enhancement

At the moment the plugin only provides OTP using Google Authenticator. Because it would be cool to have other providers ([YubiKey](https://www.yubico.com/products/yubikey-hardware/yubikey4/)) and because I'd like to play with new APIs...

enhancement