Multi-Factor Authentication is the practice of adding an extra authentication step - often requiring use of a separate device such as a smartphone. What this means for you is that even if your login credentials are somehow obtained by a third party, they still would not be able to log in without also obtaining your MFA device. Multi-Factor Authentication is essentially to any website owner who values site security.
Logging In with MFA
- In the backend, go to My Account in the top right.
- Check the Use Multi-Factor Authentication? checkbox.
- Generate an MFA Secret and scan the generated barcode using Google Authenticator (Android, iPhone).
- Enter two security questions and answers - these will be used when you don't have access to your phone.
- Click Save at the bottom of the form.
Once set up, Google Authenticator will display a continually changing set of 6 digits. When you next log in, you'll need to enter the currently showing number.
For Extra Security
- In the backend, go to Settings - Multi-Factor Authentication
- Check Require MFA for all administrators?
This option will restrict new or existing administrators who haven't yet enabled MFA to the My Account section of admin until they set it up.
Found the plugin useful on 31 May, 2019
A useful plugin - it does what it's supposed to do.
Found the plugin useful on 29 Sep, 2018
Very easy setup and the support was ultra quick.
If you want a way to add extra security to your website admin access then this is it... with a little help from google authenticator.
Very happy with purchase.
Minor bug fix for warning generated on first plugin installation
Sep 18, 2019
Fix error when saving profiles that haven't had MFA set up yet
Aug 01, 2019
Use a version of google-authenticator compatible with October's minimum PHP version
Aug 01, 2019
Revert dependency updates due to issues with capitsalisation and PHP version
Jun 01, 2019
Compatibility with v455, update dependencies
May 28, 2019
Fix error messages when inputting incorrect MFA codes
Feb 14, 2019
Jan 17, 2019
Added settings page with option to force MFA for all administrators
Jan 17, 2019
Super admins can now modify MFA settings of other admins
Jan 16, 2019
Fix the make_user_fields_nullable migration for new installations with DB prefixes
Sep 29, 2018
Deprecated method call fix
Oct 22, 2017
Case sensitivity fix
Oct 15, 2017
Make user fields nullable
Sep 29, 2016
Rainlab.User bug fix
Oct 02, 2015
Compatibility with v204
Sep 14, 2015
Apr 24, 2015