Title: WebAuthn Provider for Two Factor Author: Volodymyr Kolesnykov Published: 28. Januar 2022 Last modified: 12. März 2026 --- Plugins durchsuchen ![](https://ps.w.org/two-factor-provider-webauthn/assets/banner-772x250.jpg?rev= 2909612) ![](https://ps.w.org/two-factor-provider-webauthn/assets/icon.svg?rev=2909612) # WebAuthn Provider for Two Factor Von [Volodymyr Kolesnykov](https://profiles.wordpress.org/volodymyrkolesnykov/) [Herunterladen](https://downloads.wordpress.org/plugin/two-factor-provider-webauthn.2.6.1.zip) * [Details](https://de.wordpress.org/plugins/two-factor-provider-webauthn/#description) * [Rezensionen](https://de.wordpress.org/plugins/two-factor-provider-webauthn/#reviews) * [Entwicklung](https://de.wordpress.org/plugins/two-factor-provider-webauthn/#developers) [Support](https://wordpress.org/support/plugin/two-factor-provider-webauthn/) ## Beschreibung This plugin adds WebAuthn and passkey support to the [Two Factor](https://wordpress.org/plugins/two-factor/) plugin, providing a modern, secure authentication method. **Features:** * Support for WebAuthn and passkeys (Windows Hello, Touch ID, YubiKeys, etc.) * Backward compatibility with previously registered U2F security keys * User-friendly settings and seamless authentication experience * Customizable error logging and behavior via action hooks * Works with the Two Factor plugin for flexible 2FA authentication The plugin enables users to register and use hardware security keys and platform authenticators for stronger protection against password-based attacks and phishing. Hinweise: * bitte benutze [GitHub issues](https://github.com/sjinks/wp-two-factor-provider-webauthn/issues), um Fehler zu melden; * der vollständige Quellcode mit allen Entwicklungsdateien ist auf [GitHub](https://github.com/sjinks/wp-two-factor-provider-webauthn) verfügbar. ## Screenshots * [[ * Benutzerprofileinstellungen, die die registrierten Sicherheitsschlüssel anzeigen. * [[ * Plugin-Einstellungsseite. ## FAQ Sei der Erste, der fragt. ## Rezensionen ![](https://secure.gravatar.com/avatar/1471c57315a48ef94e2b07fef65eec994f9934b0d5be84ba24dff8be5c926781? s=60&d=retro&r=g) ### 󠀁[Working like a charm!](https://wordpress.org/support/topic/working-like-a-charm-31/)󠁿 [meksONE](https://profiles.wordpress.org/meksone/) 23. Februar 2026 Frictionless login experience for WordPress users: this is the perfect plugin, with no ads and no frills, just the strictly necessary options and working in literally 2 minutes.Compatible with: FIDO U2F, FIDO Hyperkey, Windows Hello and any other webauthn provider that is available on your machine.I can login with fingerprint, windows face scan, fingerprint on mobile, backup codes, email codes… ![](https://secure.gravatar.com/avatar/536b1e13e53f6089127749aa96170dd9292cba303475c16a76b43bd53d708c1a? s=60&d=retro&r=g) ### 󠀁[One touch 2FA is a dream](https://wordpress.org/support/topic/one-touch-2fa-is-a-dream/)󠁿 [Steven Gliebe](https://profiles.wordpress.org/stevengliebe/) 14. Januar 2025 This is great. You can literally log into WordPress with 2FA using one touch (password manager with auto-login combined with this for 2FA). Beats using an authenticator app any day. ![](https://secure.gravatar.com/avatar/fe1541ecaf52e528bd94cbb9a112fccddd6c8a1b72a9d4f53277b58298088e75? s=60&d=retro&r=g) ### 󠀁[Works well for my use case but please provide unminified JS files.](https://wordpress.org/support/topic/works-well-for-my-use-case-but-please-provide-unminified-js-files-for/)󠁿 [Rene Hermenau](https://profiles.wordpress.org/renehermi/) 26. Oktober 2024 This is helpful for evaluating purposes of the code. As this plugin is part of a security level all the code should be readable easily for auditors. Besides that, well done.Thank you. ![](https://secure.gravatar.com/avatar/45dfee4df736a68e24a40a2ba7dd9c62f74256abaa54722038fb4ab33acdbece? s=60&d=retro&r=g) ### 󠀁[Can’t register](https://wordpress.org/support/topic/cant-register-19/)󠁿 [fakeologist](https://profiles.wordpress.org/fakeologist/) 15. Oktober 2024 it worked last month perfectly, now I can’t register a new auth key. ![](https://secure.gravatar.com/avatar/02a76d95b36cbc866cf2652b1a0739943346028e0564ba8735ed59744c41cfe7? s=60&d=retro&r=g) ### 󠀁[FIDO U2F WebAuthn for Two Factor](https://wordpress.org/support/topic/fido-u2f-webauthn-for-two-factor/)󠁿 [con](https://profiles.wordpress.org/conschneider/) 2. Oktober 2024 Thank you for bridging the gap while we wait for the PR. This is what Open Source is all about. ![](https://secure.gravatar.com/avatar/ec90e4ed1ebc345d85c97486e389de060c74dc9e180ba25ed02be8a61e7683dd? s=60&d=retro&r=g) ### 󠀁[Fixes FIDO/U2F/WebAuthn functionality](https://wordpress.org/support/topic/fixes-fido-u2f-webauthn-functionality/)󠁿 [Olav Seyfarth](https://profiles.wordpress.org/nurs0da/) 4. Juni 2023 WebAuthn could be included in Two Factor, there’s a PR since Nov 22. Thanks for stepping in and even ENHANCING it. Very comprehensive! [ Alle 11 Rezensionen lesen ](https://wordpress.org/support/plugin/two-factor-provider-webauthn/reviews/) ## Mitwirkende und Entwickler „WebAuthn Provider for Two Factor“ ist Open-Source-Software. Folgende Menschen haben an diesem Plugin mitgewirkt: Mitwirkende * [ Volodymyr Kolesnykov ](https://profiles.wordpress.org/volodymyrkolesnykov/) „WebAuthn Provider for Two Factor“ wurde in 5 Sprachen übersetzt. Danke an [die Übersetzer](https://translate.wordpress.org/projects/wp-plugins/two-factor-provider-webauthn/contributors) für ihre Mitwirkung. [Übersetze „WebAuthn Provider for Two Factor“ in deine Sprache.](https://translate.wordpress.org/projects/wp-plugins/two-factor-provider-webauthn) ### Interessiert an der Entwicklung? [Durchstöbere den Code](https://plugins.trac.wordpress.org/browser/two-factor-provider-webauthn/), sieh dir das [SVN-Repository](https://plugins.svn.wordpress.org/two-factor-provider-webauthn/) an oder abonniere das [Entwicklungsprotokoll](https://plugins.trac.wordpress.org/log/two-factor-provider-webauthn/) per [RSS](https://plugins.trac.wordpress.org/log/two-factor-provider-webauthn/?limit=100&mode=stop_on_copy&format=rss). ## Änderungsprotokoll #### 2.6.1 * Compatibility with WordPress 6.9.4 * Refactor key management user interface #### 2.6.0 * Better support for passkeys * Add hooks for logging errors * Make plugin options more user-friendly * Always show Retry button * Update translations #### 2.5.6 * Fix authentication bypass with malformed request * Additional hardening #### 2.5.5 * Compatibility with WordPress 6.9.1 #### 2.5.4 * Platform requirements updated to PHP 8.1 and WordPress 6.0 (although the plugin still should work with older versions of PHP and WordPress) * GH-1008: better integration with Two Factor 0.13.0 #### 2.5.3 * Restore `WebAuthn_Provider::get_instance()` because WPVIP has an ancient version of Two Factor #### 2.5.2 * Fix the conflict when another package loads a library that has `autoload.files` key (see https://github.com/sjinks/wp-two-factor-provider-webauthn/pull/980) #### 2.5.1 * GH-898: do not show the UI if the plugin has failed to install its tables * GH-972: do not show the profile UI if the provider is disabled * drop official PHP 7.4 support #### 2.5.0 * iCloud support for Firefox (props dd32) #### 2.4.1 * GH-541: fix issues with YubiKeys (backported a patch by Markus Bauer from https:// github.com/madwizard-org/webauthn-server/pull/23) #### 2.4.0 * GH-830: introduce `webauthn_register_key_use_nicename` filter (props kat3samsin) #### 2.3.0 * GH-827: Add `webauthn_register_key_suppress_output` filter * GH-826: Add `webauthn_app_id` filter to customize U2F AppID * GH-824: Initialize `wpdb` properties as early as possible * Update `madwizard/webauthn` to 0.10.0 #### 2.2.0 * Do not create user handles if they are not needed * Add a hook to customize WebAuthN server * Update dependencies * Refactor tests #### 2.1.0 * GH-462: Use correct user ID when editing a user * GH-456: Set relying party ID to COOKIE_DOMAIN if it is available (props dd32) * Nur netzwerkweite Plugin-Aktivierung zulassen (um Two Factor zu entsprechen) #### 2.0.3 * Update translations (thank you, Copilot) * Add Ukrainian translation (thank you, Copilot) #### 2.0.2 * Update madwizard/webauthn to 0.9.0 * Update development dependencies * Update E2E tests #### 2.0.1 * GH-295: fix client extensions validation * Update development dependencies #### 2.0.0 * Put external dependencies into a unique namespace (GH-36, GH-53, GH-236) * Update madwizard/webauthn to 0.8.0 * Update development dependencies #### 1.0.10 * Add zh-tw translations (props [Chun-Chih Cheng](https://profiles.wordpress.org/alex1114/), [Alex Lion](https://profiles.wordpress.org/alexclassroom/)) * GH-215, GH-33: Fix „Unable to save the key to the database“ error for long public keys * Update development dependencies #### 1.0.9 * Update madwizard/webauthn to 0.8.0 * Update development dependencies * Add debug mode (activated with `define( 'DEBUG_TFPWA', true );`) #### 1.0.8 * Security: Update guzzlehttp/guzzle to 7.4.5 (fix [CVE-2022-31090](https://github.com/advisories/GHSA-25mq-v84q-4j7r) and [CVE-2022-31091](https://github.com/advisories/GHSA-q559-8m2m-g699)) * Do not load the plugin while WordPress is being installed #### 1.0.7.1 * Fix deployment issue. It’s time to automate the process #### 1.0.7 * GH-130: fix Network Installation issue * Update development dependencies * Add security-related workflows to CI * Improve tests #### 1.0.6.1 * Fix deployment issue #### 1.0.6 * GH-93: remove unnecessary `required` attribute from `webauthn_key_name` * Security: Update guzzlehttp/guzzle to 7.4.4 (fix CVE-2022-31042 and CVE-2022- 31043) * Update development dependencies #### 1.0.5 * Synchronize plugin version across all files #### 1.0.4 * Update translations * GH-93: add an option to turn off the old U2F provider * Update dependencies * Add more E2E tests #### 1.0.3 * GH-33: increase length of credential_id column to solve issues with Chrome on Mac * GH-38: fix bugs preventing plugin uninstallation * Make Settings::offsetGet() compatible with PHP 8.1 #### 1.0.2 * Added E2E tests * UI fixes #### 1.0.1 * First public release. ## Meta * Version **2.6.1** * Zuletzt aktualisiert **vor 1 Monat** * Aktive Installationen **1.000+** * WordPress-Version ** 6.0 oder höher ** * Getestet bis **6.9.4** * PHP-Version ** 8.1 oder höher ** * Sprachen * [Chinese (Taiwan)](https://tw.wordpress.org/plugins/two-factor-provider-webauthn/), [English (US)](https://wordpress.org/plugins/two-factor-provider-webauthn/), [French (France)](https://fr.wordpress.org/plugins/two-factor-provider-webauthn/), [German](https://de.wordpress.org/plugins/two-factor-provider-webauthn/), [Japanese](https://ja.wordpress.org/plugins/two-factor-provider-webauthn/) und [Russian](https://ru.wordpress.org/plugins/two-factor-provider-webauthn/). * [Übersetze in deine Sprache](https://translate.wordpress.org/projects/wp-plugins/two-factor-provider-webauthn) * Schlagwörter * [2FA](https://de.wordpress.org/plugins/tags/2fa/)[login](https://de.wordpress.org/plugins/tags/login/) [security](https://de.wordpress.org/plugins/tags/security/)[two factor](https://de.wordpress.org/plugins/tags/two-factor/) [webauthn](https://de.wordpress.org/plugins/tags/webauthn/) * [Erweiterte Ansicht](https://de.wordpress.org/plugins/two-factor-provider-webauthn/advanced/) ## Bewertungen 4.6 von 5 Sternen. * [ 9 5-Sterne-Rezensionen ](https://wordpress.org/support/plugin/two-factor-provider-webauthn/reviews/?filter=5) * [ 1 4-Sterne-Rezension ](https://wordpress.org/support/plugin/two-factor-provider-webauthn/reviews/?filter=4) * [ 0 3-Sterne-Rezensionen ](https://wordpress.org/support/plugin/two-factor-provider-webauthn/reviews/?filter=3) * [ 1 2-Sterne-Rezension ](https://wordpress.org/support/plugin/two-factor-provider-webauthn/reviews/?filter=2) * [ 0 1-Sterne-Rezensionen ](https://wordpress.org/support/plugin/two-factor-provider-webauthn/reviews/?filter=1) [Your review](https://wordpress.org/support/plugin/two-factor-provider-webauthn/reviews/#new-post) [Alle Rezensionen anzeigen](https://wordpress.org/support/plugin/two-factor-provider-webauthn/reviews/) ## Mitwirkende * [ Volodymyr Kolesnykov ](https://profiles.wordpress.org/volodymyrkolesnykov/) ## Support Behobene Probleme in den letzten zwei Monaten: 0 von 1 [Support-Forum anzeigen](https://wordpress.org/support/plugin/two-factor-provider-webauthn/) ## Spenden Möchtest du die Weiterentwicklung dieses Plugins unterstützen? [ Für dieses Plugin spenden ](https://www.paypal.com/donate/?hosted_button_id=SAG6877JDJ3KU)