/craft-twofactorauthentication

Craft 2 plugin for two-factor or two-step login using Time Based OTP.

Primary LanguagePHPMIT LicenseMIT

Two-Factor Authentication

Two-Factor Authentication

Craft 3 plugin for two-factor or two-step login using Time Based OTP (TOTP, like Google Authenticator). Every user can setup TOTP themselves, the plugin does not force users. Admins can list usage in user tables.

Inner working

Login works as usual for users without 2-factor auth.

When enabled, the user is redirected to the 2-factor verification page after login. This means the user is already logged in. When the user tries to visit an other Control Panel page than the public ones before verification, the logout is triggered. This blocks the user from visiting the CP unverified.

Setting screen when turning 2FA on

Setting screen when turning 2FA on

Setting screen when turning 2FA off

Setting screen when turning 2FA off

Login verification screen

Login verification screen

Requirements

  • Craft 3.0.0
  • PHP 7.x at least

Resetting a user's 2FA

Simply remove the user's twofactorauthentication_user record. This disables 2FA for that user.

License

Copyright © 2018 Born05

See license