pmclain/magento2-tfa

Two Factor Authentication for Magento 2 Admin

Magento 2 Admin Panel Two Factor Authentication

, _(*1)

Two Factor Authentication to the Magento 2 admin panel using Google Authenticator, _(*2)

Server Time

It's extremely important that you keep your server time in sync with some NTP server., _(*3)

Installation

In your Magento 2 base directory run:
composer require pmclain/magento2-tfa
bin/magento setup:upgrade, _(*4)

• TFA must be enabled by the individual user by clicking 'Account Setting(user)' in the Magento 2 admin panel.
• Once there, the user is able to enable the two factor authentication and view the QR code for a Google Authenticator compatible application.
• Users with TFA enabled will not be able to log into the admin panel without a valid authentication code input on the Magento 2 admin login page.
• Users with TFA disabled can leave the 'Authenticator Code' field blank during login.

Console Commands

TFA can be disabled using console commands if needed:, _(*5)

Disable TFA For All Admin Users

bin/magento pmclain:tfa:disable, _(*6)

Disable TFA For Single Admin User (by email)

bin/magento pcmlain:tfa:disable admin@example.com, _(*7)

Magento Version Compatibility

Google Authenticator Apps:

To use the two factor authentication, your user will have to install a Google Authenticator compatible app, below are some currently available:, _(*8)

• Authy for iOS, Android, Chrome, OS X
• FreeOTP for iOS, Android and Peeble
• FreeOTP for iOS, Android and Peeble
• Google Authenticator for iOS
• Google Authenticator for Android
• Google Authenticator for Blackberry
• Google Authenticator (port) on Windows app store
• Microsoft Authenticator for Windows Phone
• 1Password for iOS, Android, OSX, Windows

License

Open Software License v3.0, _(*9)