WP Manifestindependent plugin directory
manifest / security / wporg-two-factor

WordPress.org Two-Factor

2FA for WordPress.org accounts

★ 37stars

Install

Download source zip No release zip yet

This is the repository archive. It installs, but the folder name will carry the branch suffix and updates will not flow.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/wordpress/wporg-two-factor/archive/refs/heads/trunk.zip
No built-in updater. New versions won't appear under Dashboard → Updates. Install new releases yourself, or let Git Updater track the repository.

WordPress.org-specific customizations for the Two Factor plugin

Setup

  1. npm install
  2. npm run build --workspaces
  3. npx wp-env start
  4. Visit https://localhost:8888/users/admin/edit/account/ to view the custom settings UI.
  5. If you want to make JS changes, run npm run start --workspaces.

Testing

PHP unit tests can be run with npm test. composer run coverage will generate a coverage report.

JavaScript unit tests can be run with npm run test:js.

Security

Please privately report any potential security issues to the WordPress HackerOne program.