WP 2FA version 3 release notes
WP 2FA release notes for all version 3 builds and releases.
Update 3.1.1.2
Release date: 25h February 2026
Version 3.1.1.2 is a maintenance update which includes two minor plugin improvements. We have basically added a check in the wizard and improved the logic of the survey admin notice.
Update 3.1.1.1 – Premium only
Release date: 19th February 2026
Version 3.1.1.1 is a Premium edition only hotfix release. It addresses a licensing issue that could occur in certain site setups and license configurations, which in some cases caused an incorrect quota reached notice to be triggered. We recommend all Premium users update to this version.
Update 3.1.1
Release date: 18th February 2026
Version 3.1.1 is a maintenance update in which we fixed a number of issues and included a number of improvements. We have also added the “deactivation feedback form” to allow plugin users to easily share feedback with us and to improve the plugin.
Update 3.1.0
Release date: 17th December 2025
Version 3.1.0 is a major update for WP 2FA, with a strong focus on Passkeys, a modern and passwordless authentication method, and also on improved flexibility for agencies and businesses that white label the plugin.
Passkeys support (passwordless authentication)
This release introduces Passkeys support, allowing users to log in using a secure, cryptographic, passwordless authentication method. Passkeys are resistant to phishing, reuse, and brute-force attacks, and work across all devices and browsers of nowadays.
With this update, site owners can offer a more secure and user-friendly login experience while reducing reliance on passwords altogether.
Expanded white labeling support for setup wizards
White labeling in WP 2FA has been significantly expanded. You can now customize almost all text, prompts, and helper content shown throughout the 2FA setup and backup method wizards, including:
- Wizard’s generic notices, and final steps’ slides
- Backup method prompts and warning modals
- Helper text and logos for TOTP methods and supported apps
- Editable links for backup methods on the login page
- 2FA methods can now be renamed to any name of your choice.
This gives agencies and hosting providers full control over how WP 2FA appears to end users, from first login to completion of the setup process.
Other notheworty improvements and enhancements
In this update we also included the following updates:
- API credentials for supported services such as Twilio, Authy, Clickatell, and YubiKey are now encrypted
- Updated the SMS templates to better support automatic 2FA code detection and auto populate on mobile devices
- Strengthened authentication flow validation and database query sanitization to improve overall security
This release also includes multiple bug fixes related to REST API, multisite setups, WooCommerce logins, white labeling text rendering, shortcode behavior, and interim login flows, improving reliability across a wide range of setups.
Update 3.0.1
Release date: 19th November 2025
Version 3.0.1 of WP 2FA is a maintenance update which features a number of minor bug fixes and improvements.
Update 3.0.0
Release date: 23rd September 2025
Version 3.0.0 of WP 2FA introduces a major new feature alongside several improvements to make two-factor authentication more flexible and easier to manage.
Zero-setup email 2FA
The headline feature of this release is the new Zero-setup email 2FA method. With this method, administrators can enforce 2FA for users without requiring any setup or interaction from their side. When enabled in a policy, users that fall under that policy will automatically be enrolled and at their next login, they receive a one-time code via email to complete the authentication process.
This method fits perfectly on membership and e-commerce websites, where site owners want to enforce stronger login security across large numbers of users or customers with minimal friction.
Other noteworthy updates
Some other updates included in this update:
- Longer backup codes: Backup codes are now 16 digits for improved security.
- Extended grace period: The maximum allowed grace period has been increased to 90 days, giving administrators more flexibility when rolling out 2FA.
- Accessibility improvements: The 2FA setup wizard can now be fully navigated using only the keyboard, improving accessibility for all users.
This release also includes a good number of smaller improvements and bug fixes. Refer to the changelog for a complete detailed list of what is new, improved, and fixed.