For apps like Google Authenticator, Authy, and other TOTP-based authenticator applications. Requires ProcessWire 3.0.109+.

TOTP Two Factor Authentication for ProcessWire

TOTP means Time-based One-Time Password algorithm, which is a standard used by many 2FA authenticator apps such as the following (all available on both Android and iOS):

  • Google Authenticator
  • Authy Authenticator by Twilio
  • Microsoft Authenticator
  • LastPass Authenticator
  • And several others…

Requirements

  • ProcessWire 3.0.109 or newer.
  • PHP 5.6 or newer.
  • For users wanting to enable 2FA, it requires that they have a TOTP authenticator app installed, typically on a mobile phone.

How to install

  1. Place the files for this module in /site/modules/TfaTotp/.
  2. In the admin, go to Modules > Refresh.
  3. Go to Modules > Site > Tfa, and click “Install” for this module.

How to use

  1. Edit your user profile in the ProcessWire admin.
  2. Scroll to the bottom and you should see a new field for “Two factor authentication”.
  3. Select the “TOTP” option and click Submit (note: it’ll ask for your password first).
  4. After submitting the change, go back to the field and it will want you to open your authenticator application to scan the QR code it provides.
  5. After scanning the QR code, your authenticator app will provide a 6 digit code for you to enter in ProcessWire. This is just to confirm that everything is working. After doing this, click submit, and you are done.

Once two-factor authentication is enabled, when you login, there will be a second step where it will ask you to enter a code. You can get this code by opening your chosen authenticator app.

Credits

Install and use modules at your own risk. Always have a site and database backup before installing new modules.

Twitter updates

  • ProcessWire 3.0.185 (dev) core updates, plus new Session Allow module— More
    17 September 2021
  • Three new ProcessWire Textformatter modules: Find/Replace, Markdown in Markup, and Emoji— More
    3 September 2021
  • This week we have a new master version released after a year in the making. With nearly 40 pull requests, hundreds of new additions and more than 100 issue reports resolved, this new version has a ton of great new stuff— More
    27 August 2021

Latest news

  • ProcessWire Weekly #384
    In the 384th issue of ProcessWire Weekly we'll cover the latest core updates, introduce a new module called Session Allow, and highlight a new site of the week. Read on!
    Weekly.pw / 18 September 2021
  • ProcessWire 3.0.184 new master/main version
    This week we have a new master/main version released after a full year in the making. As you might imagine, this new version has a ton of great new stuff and we’ll try to cover much of it here.
    Blog / 27 August 2021
  • Subscribe to weekly ProcessWire news

“Indeed, if ProcessWire can be considered as a CMS in its own right, it also offers all the advantages of a CMF (Content Management Framework). Unlike other solutions, the programmer is not forced to follow the proposed model and can integrate his/her ways of doing things.” —Guy Verville, Spiria Digital Inc.