9 releases 9 tags

RSS feed

• 1.5.2 38520b2ba7

  Compare

  v1.5.2 Stable

  javier released this 2026-06-08 11:14:17 +00:00 | 0 commits to main since this release

  1.5.2

  Release date: 2026-06-06

  Added

  • OTP import tool (2FA > Import) — import authenticator secrets from third-party 2FA plugins without requiring users to reconfigure their app:
    • Two Factor (community) — plain Base32 from _two_factor_totp_key user meta.
    • WP 2FA (Melapress) — plain or encrypted Base32 from wp_2fa_totp_key user meta; decrypted if WP 2FA is active.
    • Wordfence Login Security — raw binary from wfls_2fa_secrets table, Base32-encoded on import.
  • Admin notice banner when importable secrets are detected; dismissible per-admin for 7 days or permanently via Import page preference.
  • Import correctly skips users who already have OTP actively configured in our plugin; only imports for users who have not yet activated OTP here.

  Fixed

  • Deactivating the Authenticator App method from the profile no longer pre-generates a new OTP secret immediately. The secret is deleted cleanly and a fresh QR code is generated lazily the next time the user views their profile. This ensures the import tool can correctly detect these users as candidates.

  Compatibility

  • WordPress: 6.4 – 7.1
  • PHP: 8.0 – 8.5

  Tests

  • PHP Coding Standards: PHP_CodeSniffer 3.13.5 / WPCS 3.3.0
  • PHPStan: level 9 — 0 errors
  • PHPCompatibility: 8.0–8.5 — 0 issues
  • PHPUnit: 9.6.34 — 42 tests, 109 assertions

  Downloads

  • robotstxt-2fa-1.5.2.zip
    15 downloads · 2026-06-08 11:14:14 +00:00 · 3.4 MiB