2FA is skipped when WP Cerber plugin is enabled
-
When I have WP Cerber enabled with default settings, the login will not ask for the second factor (TOTP in my case). It seems like 2FA is completely skipped, but I have not been able to determine why and there’s no error on the page or in the logs.
I have tried to disable individual settings in WP Cerber, but none made a difference. It has an option to set a custom login URL, which is disabled by default. It also registers an ‘authenticate’ filter, but with the lowest possible priority: https://github.com/common-repository/wp-cerber/blob/318d894e487455ae9eb89a8704ec09f1590d311d/cerber-load.php#L1107 (not latest version, but this code is the same as latest)
Workaround is to disable the WP Cerber plugin, but that’s not a permanent solution for me.
(Background: I switched from Two Factor to Secure 2FA because otherwise Secure Passkeys wouldn’t work, see also https://wordpress.org/support/topic/can-2fa-work-alongside-passkeys/)
The topic ‘2FA is skipped when WP Cerber plugin is enabled’ is closed to new replies.
