Source evidence

Great plugin with a compatibility issue

Two Factor · review · 2025-08-20T17:52:00+00:00

Two Factor plugin evidence original source source API

mixedsentiment

mediumseverity

0.42relevance

3replies

Evidence linked to opportunitycommercial context

Proof Health

Open evidence

Commercial opportunities need traceable source links before they are treated as build-worthy.

6 / 32 rows with source links

18.8% of this page's analysis has direct source links.

0 build-decision rows missing links

0 rows here require auditable proof before promotion.

26 rows with no attached evidence

0 rows have source counts but still need direct links.

Conversation

review · 4 stars

michavo73 unresolved

A great plugin and absolutely useful and important! Unfortunately, there is a problem that needs to be addressed and resolved: The QR code generated for 2FA apps is reported as incorrect by the 2FAS smartphone app. If you type the code below into the app, everything works fine. This problem did not occur with Google Authenticator. Of course, it seems to be a problem with the 2FAS app, because Google can do it! But shouldn’t the problem be analyzed in more detail on the developer side? I will probably also inform the developer of the app. However, it would certainly be best if the two experts (plugin here and app there) got in touch with each other. I have now discovered that the plugin appends & to the URL stored in the QR code after the token. I don’t know what significance this has. In any case, if you remove this addition, the generated QR code or URL is transferred cleanly to the app. Thanks for reporting the issue! It has been fixed since version 0.14.1 of the plugin. Thank you very much! Great! 🙂

Commercial Context

Opportunity

trust and abuse-prevention operations

Security abuse-prevention assurance for keeping sites trusted, protected, and recoverable

Buyer: site owners, agencies, and maintenance teams

Wedge: test security lockouts, bot/spam defenses, risky access changes, and incident alerts

Proof Blocked card complete market

Analysis

codex:gpt-5.5

Summary: The reviewer reports that generated 2FA QR codes failed in the 2FAS app, though the vendor later fixed it in version 0.14.1.

Evidence quote: The QR code generated for 2FA apps is reported as incorrect by the 2FAS smartphone app.

Affected feature: 2FA QR codes

compatibility bugs quality 2FA QR codes

Plugin

API

Two Factor

100.0K active installs · 1.7M downloads · rating 96.0

2fa authentication mfa security totp

Comments

3 shown

michavo73 2025-08-20T18:29:00+00:00

I have now discovered that the plugin appends & to the URL stored in the QR code after the token. I don’t know what significance this has. In any case, if you remove this addition, the generated QR code or URL is transferred cleanly to the app.

Kaspars 2025-09-07T13:26:00+00:00

Thanks for reporting the issue! It has been fixed since version 0.14.1 of the plugin.

michavo73 2025-09-07T14:44:00+00:00

Thank you very much! Great! 🙂