Title: WebAuthn Provider for Two Factor Author: Volodymyr Kolesnykov Published: 28 de Enero de 2022 Last modified: 12 de Marzo de 2026 --- Buscar plugins ![](https://ps.w.org/two-factor-provider-webauthn/assets/banner-772x250.jpg?rev= 2909612) ![](https://ps.w.org/two-factor-provider-webauthn/assets/icon.svg?rev=2909612) # WebAuthn Provider for Two Factor Por [Volodymyr Kolesnykov](https://profiles.wordpress.org/volodymyrkolesnykov/) [Descargar](https://downloads.wordpress.org/plugin/two-factor-provider-webauthn.2.6.1.zip) * [Detalles](https://cl.wordpress.org/plugins/two-factor-provider-webauthn/#description) * [Reseñas](https://cl.wordpress.org/plugins/two-factor-provider-webauthn/#reviews) * [Desarrollo](https://cl.wordpress.org/plugins/two-factor-provider-webauthn/#developers) [Soporte](https://wordpress.org/support/plugin/two-factor-provider-webauthn/) ## Descripción This plugin adds WebAuthn and passkey support to the [Two Factor](https://wordpress.org/plugins/two-factor/) plugin, providing a modern, secure authentication method. **Features:** * Support for WebAuthn and passkeys (Windows Hello, Touch ID, YubiKeys, etc.) * Backward compatibility with previously registered U2F security keys * User-friendly settings and seamless authentication experience * Customizable error logging and behavior via action hooks * Works with the Two Factor plugin for flexible 2FA authentication The plugin enables users to register and use hardware security keys and platform authenticators for stronger protection against password-based attacks and phishing. Notes: * please use [GitHub issues](https://github.com/sjinks/wp-two-factor-provider-webauthn/issues) to report bugs; * the full source code with all development files is available on [GitHub](https://github.com/sjinks/wp-two-factor-provider-webauthn). ## Capturas de pantalla * [[ * User profile settings showing the registered security keys. * [[ * Plugin settings page. ## FAQ Be the first to ask. ## Reseñas ![](https://secure.gravatar.com/avatar/1471c57315a48ef94e2b07fef65eec994f9934b0d5be84ba24dff8be5c926781? s=60&d=retro&r=g) ### 󠀁[Working like a charm!](https://wordpress.org/support/topic/working-like-a-charm-31/)󠁿 [meksONE](https://profiles.wordpress.org/meksone/) 23 de Febrero de 2026 Frictionless login experience for WordPress users: this is the perfect plugin, with no ads and no frills, just the strictly necessary options and working in literally 2 minutes.Compatible with: FIDO U2F, FIDO Hyperkey, Windows Hello and any other webauthn provider that is available on your machine.I can login with fingerprint, windows face scan, fingerprint on mobile, backup codes, email codes… ![](https://secure.gravatar.com/avatar/536b1e13e53f6089127749aa96170dd9292cba303475c16a76b43bd53d708c1a? s=60&d=retro&r=g) ### 󠀁[One touch 2FA is a dream](https://wordpress.org/support/topic/one-touch-2fa-is-a-dream/)󠁿 [Steven Gliebe](https://profiles.wordpress.org/stevengliebe/) 14 de Enero de 2025 This is great. You can literally log into WordPress with 2FA using one touch (password manager with auto-login combined with this for 2FA). Beats using an authenticator app any day. ![](https://secure.gravatar.com/avatar/fe1541ecaf52e528bd94cbb9a112fccddd6c8a1b72a9d4f53277b58298088e75? s=60&d=retro&r=g) ### 󠀁[Works well for my use case but please provide unminified JS files.](https://wordpress.org/support/topic/works-well-for-my-use-case-but-please-provide-unminified-js-files-for/)󠁿 [Rene Hermenau](https://profiles.wordpress.org/renehermi/) 26 de Octubre de 2024 This is helpful for evaluating purposes of the code. As this plugin is part of a security level all the code should be readable easily for auditors. Besides that, well done.Thank you. ![](https://secure.gravatar.com/avatar/45dfee4df736a68e24a40a2ba7dd9c62f74256abaa54722038fb4ab33acdbece? s=60&d=retro&r=g) ### 󠀁[Can’t register](https://wordpress.org/support/topic/cant-register-19/)󠁿 [fakeologist](https://profiles.wordpress.org/fakeologist/) 15 de Octubre de 2024 it worked last month perfectly, now I can’t register a new auth key. ![](https://secure.gravatar.com/avatar/02a76d95b36cbc866cf2652b1a0739943346028e0564ba8735ed59744c41cfe7? s=60&d=retro&r=g) ### 󠀁[FIDO U2F WebAuthn for Two Factor](https://wordpress.org/support/topic/fido-u2f-webauthn-for-two-factor/)󠁿 [con](https://profiles.wordpress.org/conschneider/) 2 de Octubre de 2024 Thank you for bridging the gap while we wait for the PR. This is what Open Source is all about. ![](https://secure.gravatar.com/avatar/ec90e4ed1ebc345d85c97486e389de060c74dc9e180ba25ed02be8a61e7683dd? s=60&d=retro&r=g) ### 󠀁[Fixes FIDO/U2F/WebAuthn functionality](https://wordpress.org/support/topic/fixes-fido-u2f-webauthn-functionality/)󠁿 [Olav Seyfarth](https://profiles.wordpress.org/nurs0da/) 4 de Junio de 2023 WebAuthn could be included in Two Factor, there’s a PR since Nov 22. Thanks for stepping in and even ENHANCING it. Very comprehensive! [ Leer los 11 comentarios ](https://wordpress.org/support/plugin/two-factor-provider-webauthn/reviews/) ## Colaboradores & Desarrolladores “WebAuthn Provider for Two Factor” es software de código abierto. Las siguientes personas han contribuido a este plugin. Colaboradores * [ Volodymyr Kolesnykov ](https://profiles.wordpress.org/volodymyrkolesnykov/) “WebAuthn Provider for Two Factor” ha sido traducido en 5 idiomas. Gracias a [los traductores](https://translate.wordpress.org/projects/wp-plugins/two-factor-provider-webauthn/contributors) por sus contribuciones. [Traduce “WebAuthn Provider for Two Factor” a tu idioma.](https://translate.wordpress.org/projects/wp-plugins/two-factor-provider-webauthn) ### ¿Interesado en el desarrollo? [Revisa el código](https://plugins.trac.wordpress.org/browser/two-factor-provider-webauthn/), echa un vistazo al [repositorio SVN](https://plugins.svn.wordpress.org/two-factor-provider-webauthn/), o suscríbete al [registro de desarrollo](https://plugins.trac.wordpress.org/log/two-factor-provider-webauthn/) por [RSS](https://plugins.trac.wordpress.org/log/two-factor-provider-webauthn/?limit=100&mode=stop_on_copy&format=rss). ## Historial de cambios #### 2.6.1 * Compatibility with WordPress 6.9.4 * Refactor key management user interface #### 2.6.0 * Better support for passkeys * Add hooks for logging errors * Make plugin options more user-friendly * Always show Retry button * Update translations #### 2.5.6 * Fix authentication bypass with malformed request * Additional hardening #### 2.5.5 * Compatibility with WordPress 6.9.1 #### 2.5.4 * Platform requirements updated to PHP 8.1 and WordPress 6.0 (although the plugin still should work with older versions of PHP and WordPress) * GH-1008: better integration with Two Factor 0.13.0 #### 2.5.3 * Restore `WebAuthn_Provider::get_instance()` because WPVIP has an ancient version of Two Factor #### 2.5.2 * Fix the conflict when another package loads a library that has `autoload.files` key (see https://github.com/sjinks/wp-two-factor-provider-webauthn/pull/980) #### 2.5.1 * GH-898: do not show the UI if the plugin has failed to install its tables * GH-972: do not show the profile UI if the provider is disabled * drop official PHP 7.4 support #### 2.5.0 * iCloud support for Firefox (props dd32) #### 2.4.1 * GH-541: fix issues with YubiKeys (backported a patch by Markus Bauer from https:// github.com/madwizard-org/webauthn-server/pull/23) #### 2.4.0 * GH-830: introduce `webauthn_register_key_use_nicename` filter (props kat3samsin) #### 2.3.0 * GH-827: Add `webauthn_register_key_suppress_output` filter * GH-826: Add `webauthn_app_id` filter to customize U2F AppID * GH-824: Initialize `wpdb` properties as early as possible * Update `madwizard/webauthn` to 0.10.0 #### 2.2.0 * Do not create user handles if they are not needed * Add a hook to customize WebAuthN server * Update dependencies * Refactor tests #### 2.1.0 * GH-462: Use correct user ID when editing a user * GH-456: Set relying party ID to COOKIE_DOMAIN if it is available (props dd32) * Allow only for network-wide plugin activation (to match Two Factor) #### 2.0.3 * Update translations (thank you, Copilot) * Add Ukrainian translation (thank you, Copilot) #### 2.0.2 * Update madwizard/webauthn to 0.9.0 * Update development dependencies * Update E2E tests #### 2.0.1 * GH-295: fix client extensions validation * Update development dependencies #### 2.0.0 * Put external dependencies into a unique namespace (GH-36, GH-53, GH-236) * Update madwizard/webauthn to 0.8.0 * Update development dependencies #### 1.0.10 * Add zh-tw translations (props [Chun-Chih Cheng](https://profiles.wordpress.org/alex1114/), [Alex Lion](https://profiles.wordpress.org/alexclassroom/)) * GH-215, GH-33: Fix “Unable to save the key to the database” error for long public keys * Update development dependencies #### 1.0.9 * Update madwizard/webauthn to 0.8.0 * Update development dependencies * Add debug mode (activated with `define( 'DEBUG_TFPWA', true );`) #### 1.0.8 * Security: Update guzzlehttp/guzzle to 7.4.5 (fix [CVE-2022-31090](https://github.com/advisories/GHSA-25mq-v84q-4j7r) and [CVE-2022-31091](https://github.com/advisories/GHSA-q559-8m2m-g699)) * Do not load the plugin while WordPress is being installed #### 1.0.7.1 * Fix deployment issue. It’s time to automate the process #### 1.0.7 * GH-130: fix Network Installation issue * Update development dependencies * Add security-related workflows to CI * Improve tests #### 1.0.6.1 * Fix deployment issue #### 1.0.6 * GH-93: remove unnecessary `required` attribute from `webauthn_key_name` * Security: Update guzzlehttp/guzzle to 7.4.4 (fix CVE-2022-31042 and CVE-2022- 31043) * Update development dependencies #### 1.0.5 * Synchronize plugin version across all files #### 1.0.4 * Update translations * GH-93: add an option to turn off the old U2F provider * Update dependencies * Add more E2E tests #### 1.0.3 * GH-33: increase length of credential_id column to solve issues with Chrome on Mac * GH-38: fix bugs preventing plugin uninstallation * Make Settings::offsetGet() compatible with PHP 8.1 #### 1.0.2 * Added E2E tests * UI fixes #### 1.0.1 * First public release. ## Meta * Versión **2.6.1** * Última actualización **hace 1 mes** * Instalaciones activas **1,000+** * Versión de WordPress ** 6.0 o superior ** * Probado hasta **6.9.4** * Versión de PHP ** 8.1 o superior ** * Idiomas * [Chinese (Taiwan)](https://tw.wordpress.org/plugins/two-factor-provider-webauthn/), [English (US)](https://wordpress.org/plugins/two-factor-provider-webauthn/), [French (France)](https://fr.wordpress.org/plugins/two-factor-provider-webauthn/), [German](https://de.wordpress.org/plugins/two-factor-provider-webauthn/), [Japanese](https://ja.wordpress.org/plugins/two-factor-provider-webauthn/), y [Russian](https://ru.wordpress.org/plugins/two-factor-provider-webauthn/). * [Traducir a tu idioma](https://translate.wordpress.org/projects/wp-plugins/two-factor-provider-webauthn) * Etiquetas * [2FA](https://cl.wordpress.org/plugins/tags/2fa/)[login](https://cl.wordpress.org/plugins/tags/login/) [security](https://cl.wordpress.org/plugins/tags/security/)[two factor](https://cl.wordpress.org/plugins/tags/two-factor/) [webauthn](https://cl.wordpress.org/plugins/tags/webauthn/) * [Vista Avanzada](https://cl.wordpress.org/plugins/two-factor-provider-webauthn/advanced/) ## Calificaciones 4.6 de 5 estrellas. * [ 9 valoraciones de 5 estrellas ](https://wordpress.org/support/plugin/two-factor-provider-webauthn/reviews/?filter=5) * [ 1 valoración de 4 estrellas ](https://wordpress.org/support/plugin/two-factor-provider-webauthn/reviews/?filter=4) * [ 0 valoraciones de 3 estrellas ](https://wordpress.org/support/plugin/two-factor-provider-webauthn/reviews/?filter=3) * [ 1 valoración de 2 estrellas ](https://wordpress.org/support/plugin/two-factor-provider-webauthn/reviews/?filter=2) * [ 0 valoraciones de 1 estrellas ](https://wordpress.org/support/plugin/two-factor-provider-webauthn/reviews/?filter=1) [Your review](https://wordpress.org/support/plugin/two-factor-provider-webauthn/reviews/#new-post) [Ver todas las reseñas](https://wordpress.org/support/plugin/two-factor-provider-webauthn/reviews/) ## Colaboradores * [ Volodymyr Kolesnykov ](https://profiles.wordpress.org/volodymyrkolesnykov/) ## Soporte Problemas resueltos en los últimos dos meses: 0 de 1 [Ver el foro de soporte](https://wordpress.org/support/plugin/two-factor-provider-webauthn/) ## Donar ¿Te gustaría apoyar el avance de este plugin? [ Donar para este plugin ](https://www.paypal.com/donate/?hosted_button_id=SAG6877JDJ3KU)