Dion Hulse

This could be dealt with the same as the TOTP setup process. Rather than generating and saving them server-side before showing the UI, they could be generated, provided to the...

This is a duplicate of #423, mostly. The Enabled checkbox is being saved as enabled, but the UI is not showing it as enabled as it has no keys enabled...

> dd32 Can you please merge this pull request for me? This isn't my call. I would suggest using a plugin that adds a WebAuthN provider in the meantime: https://wordpress.org/plugins/two-factor-provider-webauthn/...

This plugin doesn't trigger 503's responses directly, and the only place in core that triggers them (that I can think of/find) is [maintenance mode during auto-updates](https://github.com/WordPress/wordpress-develop/blob/f4d2a1593f7e542d4f5f8bab212edc9cb3d1541b/src/wp-includes/load.php#L355-L385), which theoretically could be...

> OTP usually uses the hostname to create the value Assuming you're referring to TOTP here, the hostname is included in the description, but is not used within the validation...

> I disabled the plugin by renaming its folder, but in this case, I can't log in either. The login screen just keeps refreshing and gets back to the credentials...

I agree with @iandunn here - It sounds like this is simply Core's behaviour when `__FILE__` exists outside of `ABSPATH` and `WP_CONTENT_DIR`, which necessitates such hosting environments to have a...

It's worth noting that step 2 of "Install a QR code scanner app" in the rough sketch above isn't normally a separate step, it's built in to most (all?) of...

For comparison of what users may be accustomed to already, I'm including some Screenshots of other platforms where TOTP is implemented. Notably - They all seem to preference mobile devices...

The other problem is that `en_GB` is currently labeled as `English (UK)` which is much more inclusive of all UK countries than `British English` is; But we also don't have...