- Bugfix: saving standard user profile fields no longer resets the time-based-password key, see #341.
- Bugfix: remove spaces around authentication codes before verifying them, see #339 (props @paulschreiber).
- Bugfix: allow admins to configure FIDO U2F keys for other users, see #349.
- Enable the "Dummy" authenticator method only when
WP_DEBUG
is set since we don't want regular users using it. - New: Add an
two_factor_user_authenticated
action when the user is logged-in after the second factor has been verified, see #324 (props @Kubitomakita). - New: Add
two_factor_token_email_subject
andtwo_factor_token_email_message
filters to customize the email code subject and body, see #345 (props @christianc1). - Update the reference article URL in the readme files to account for domain change, see #332 (props @todeveni).