Sigil – Passkeys and Two-Factor Authentication

Audited at release

v0.1.2WordPress PluginAudited Today

Add two-factor authentication to WordPress logins: passkeys, authenticator apps, backup codes and email codes, with per-role enforcement.

HIGH

Total Findings

Security Grade

Security Findings

Critical0

High5

Medium23

Low13

Info31

Executive Summary

Directory audit — deterministic scanners only (Wordfence, OSV, PHPCS, PHPStan, Semgrep, Psalm, compat). Sign in and run a full audit for AI-grade analysis (security, quality, accessibility).

Security Report Card

PHP Compatibility

Requires PHP 8.0Declared minimum: 7.4Mismatch detected

Categories with Findings

PHP CompatibilitydatabasePlugin LifecycleCoding StandardsAuth & AuthorizationType SafetygdprsecurityWordPress CompatibilityData Privacy

Plugin Info

Audit Count: 1
Type: plugin

Embed Audit Badge

Show your audit status in your README or website.

[![Sigil – Passkeys and Two-Factor Authentication security audit by WP HealthKit](https://wphealthkit.com/api/badge/by-slug/sigil-2fa)](https://wphealthkit.com/directory/sigil-2fa)

Paste this in your GitHub README or any Markdown file. The badge updates automatically on every re-audit — no need to refresh the snippet.

Site owners: should they update? See the update-safety verdict for Sigil – Passkeys and Two-Factor Authentication

Are you the developer?

Claim this listing to get a Verified badge, control public audits, and get automatic re-scans.

Claim This Plugin

Audit Your Plugin

Get a comprehensive security audit for your WordPress plugin or theme. Upload your zip and get results in minutes.

Start Free Audit

PHP Compatibility

Requires PHP 8.0Declared minimum: 7.4Mismatch detected

Categories with Findings

PHP CompatibilitydatabasePlugin LifecycleCoding StandardsAuth & AuthorizationType SafetygdprsecurityWordPress CompatibilityData Privacy