diff --git a/class-two-factor-core.php b/class-two-factor-core.php
index edc9ebe6..c5864340 100644
--- a/class-two-factor-core.php
+++ b/class-two-factor-core.php
@@ -1404,6 +1404,8 @@ public static function _login_form_revalidate_2fa( $nonce = '', $provider = '',
 			'two-factor-login'    => time(),
 		) );
 
+		do_action( 'two_factor_user_revalidated', $user, $provider );
+		
 		// Must be global because that's how login_header() uses it.
 		global $interim_login;
 		$interim_login = isset( $_REQUEST['interim-login'] ); // phpcs:ignore WordPress.WP.GlobalVariablesOverride.Prohibited,WordPress.Security.NonceVerification.Recommended