Blog
FAQ
Discussions
Search
Projects, issues, users, and merge requests.
Project ID, name, and description.
User nickname, name, and org.
Issue ID, title, and summary.
Merge request titles.
Contrib
.social
Feed
Live feed
Builds
Live builds
Core
Tags
Tags and Initiatives
#DC
Portland 2024
6-9 May
#
DrupalCon Portland
2024
🇺🇸
Two-factor Authentication (TFA)
Open on Drupal.org →
Open on Drupal GitLab →
Created on 21 March 2011,
over 13 years ago
Maintained by
🇺🇸
United States
coltrane
🇺🇸
United States
daggerhart
🇺🇸
United States
greggles
🇵🇹
Portugal
jcnventura
🇺🇸
United States
nerdstein
Clone
Clone with SSH
Clone with HTTPS
Clone with
doGit
Follow
Sign in to follow projects
Merge Requests
More
!84
Change autocomplete attribute to 'one-time-code'
Open
Show issue
🇳🇱
Netherlands
nvandijk
updated
5 days ago
!83
Incorrect typehint \Drupal\encrypt\EncryptionProfileInterface
Open
Show issue
🇮🇳
India
zaryab_drupal
updated
12 days ago
!82
Remove 'sms' from tfa_user_settings
Closed
Show issue
🇮🇳
India
kalash-j
updated
about 2 months ago
!37
Remove 'sms' from tfa_user_settings
Open
Show issue
🇮🇳
India
kalash-j
updated
2 months ago
!81
Add drush as a development dependency
Merged
Show issue
🇺🇸
United States
cmlara
updated
2 months ago
!80
Add drush as a development dependency
Merged
Show issue
🇺🇸
United States
cmlara
updated
2 months ago
More Merge Requests
Issues
✨
Change autocomplete attribute to 'one-time-code'
Needs work
Code
Created
5 days ago
v2.0
🇳🇱
Netherlands
nvandijk
about 12 hours ago
📌
Fix phpcs issues
Fixed
Code
Created
23 days ago
v2.0
🇵🇹
Portugal
jcnventura
9 days ago
📌
Incorrect typehint \Drupal\encrypt\EncryptionProfileInterface
Needs work
Code
Created
2 months ago
v1.0
🇺🇸
United States
andyg5000
12 days ago
🐛
error when hitting login button after requesting a password reset
Postponed
Code
Created
21 days ago
v2.0
🇺🇸
United States
dianacastillo
20 days ago
✨
[PP-2] Add D11 Support
Postponed
Code
Created
25 days ago
v1.0
🇺🇸
United States
cmlara
25 days ago
💬
Will TFA work along with masquerade ?
Closed: cannot reproduce
Code
Created
about 1 month ago
v1.7
🇮🇳
India
kbk1992
26 days ago
🐛
Full Setup not working on 8.x-1.7
Needs work
Code
Created
26 days ago
v1.7
MarcellinoStroosnijder
26 days ago
✨
TFA module with headless Drupal
Active
Code
Created
about 2 months ago
v2.0
🇫🇷
France
Jibus
26 days ago
✨
Allow for formatted help text on login form
Needs work
Code
Created
about 4 years ago
v2.0
🇺🇸
United States
michael_wojcik
about 1 month ago
💬
Miniorange_2fa causes You are not authorized to access this page during login.
Active
User interface
Created
about 2 months ago
v1.7
🇳🇱
Netherlands
zebda
about 2 months ago
✨
Allow TFA requirement to be configured per user
Needs work
Code
Created
over 1 year ago
v2.0
🇦🇺
Australia
dpi
about 2 months ago
✨
Allow modules to skip TFA through a hook
Closed: duplicate
Code
Created
about 2 months ago
v2.0
🇦🇹
Austria
JordiK
about 2 months ago
🐛
The "skip step"/"skip and finish" button UX is confusing because the error "TFA setup canceled" is then shown when clicked
Postponed: needs info
User interface
Created
4 months ago
v1.0
🇬🇧
United Kingdom
alexharries
about 2 months ago
✨
Force user to setup TFA when required and there are no remaining skips
Needs work
Code
Created
almost 3 years ago
v2.0
🇧🇬
Bulgaria
SimeonKesmev
about 2 months ago
📌
Remove 'sms' from tfa_user_settings
Needs review
Code
Created
10 months ago
v2.0
🇺🇸
United States
cmlara
about 2 months ago
📌
Add drush as a development dependency
Fixed
Code
Created
2 months ago
v2.0
🇺🇸
United States
cmlara
2 months ago
🐛
Encrypt error with php 8.1
Postponed: needs info
Code
Created
7 months ago
v1.0
🇳🇱
Netherlands
zebda
2 months ago
📌
Add GitLab CI D7
Fixed
Code
Created
3 months ago
v2.0
🇸🇰
Slovakia
poker10
3 months ago
🐛
Creation of dynamic property TfaTestCase::$web_user is deprecated
Fixed
Code
Created
3 months ago
v2.0
🇸🇰
Slovakia
poker10
3 months ago
✨
Create a drush command to disable the TFA of any user.
Closed: duplicate
Code
Created
3 months ago
v1.0
🇮🇳
India
rahulrasgon
3 months ago
🐛
The "tfa_trusted_browser" plugin does not exist.
Needs work
Code
Created
3 months ago
v1.5
🇳🇱
Netherlands
JoshaHubbers
3 months ago
🐛
2.x-dev incompatible with other modules calling user_login_finalize()
Needs review
Code
Created
4 months ago
v2.0
🇺🇸
United States
grasmash
3 months ago
🐛
Views "TFA status" field wrong output
Active
Code
Created
3 months ago
v2.0
🇧🇪
Belgium
Den Tweed
3 months ago
📌
Evaluate if allowUserSetupAccess should be on API or removed
Active
Code
Created
3 months ago
v2.0
🇺🇸
United States
cmlara
3 months ago
📌
Add "role-based requirements" to module page
Fixed
Documentation
Created
4 months ago
v2.0
🇺🇸
United States
froboy
3 months ago
📌
provide an option to skip sql sanitization for tfa
Active
Code
Created
about 1 year ago
v2.0
🇮🇳
India
shivamitakari
3 months ago
📌
Document TFA disables Core User Login block
Active
Documentation
Created
3 months ago
v1.0
🇬🇧
United Kingdom
alexharries
3 months ago
🐛
Installing contrib modules can lead to TFA accidently being bypassed
Fixed
Code
Created
6 months ago
v2.0
🇺🇸
United States
cmlara
4 months ago
🐛
Two factor authentication security code input is not focused
Active
Code
Created
4 months ago
v1.0
🇪🇪
Estonia
pjotr.savitski
4 months ago
📌
Use an EventSubscriber to process one time login links
Needs work
Code
Created
9 months ago
v2.0
🇺🇸
United States
cmlara
4 months ago
🐛
Don't send notification emails when enabling trusted browser
Needs work
Code
Created
4 months ago
v1.5
🇫🇮
Finland
ZeiP
4 months ago
📌
Fix install instruction on project-page
Postponed: needs info
Documentation
Created
4 months ago
v1.0
🇳🇱
Netherlands
JoshaHubbers
4 months ago
🐛
Creation of dynamic property Drupal\tfa\Plugin\Tfa\TfaTotp::$isValid is deprecated
Fixed
Code
Created
12 months ago
v2.0
🇺🇸
United States
markdorison
4 months ago
🐛
tfa.cache.memcache is not using memory cache backend
Fixed
Code
Created
5 months ago
v2.0
🇺🇸
United States
cmlara
4 months ago
💬
Migration from Drupal 7 to Drupal 9
Active
Miscellaneous
Created
over 1 year ago
v1.0
🇺🇸
United States
jsutta
4 months ago
🐛
Resolve SA-CONTRIB-2024-003 in 2.x branch
Active
Code
Created
5 months ago
v2.0
🇺🇸
United States
cmlara
5 months ago
📌
[Feb 7th] Public followup for SA-CONTRIB-2023-003
Active
Code
Created
5 months ago
v1.0
🇺🇸
United States
cmlara
5 months ago
✨
Create "Email one-time-code" Validation Plugin & related Setup Plugin
Closed: outdated
Code
Created
over 6 years ago
v2.0
🇺🇸
United States
daggerhart
5 months ago
🌱
Roadmap for 2.0.0 release
Active
Miscellaneous
Created
12 months ago
v2.0
🇺🇸
United States
cmlara
5 months ago
📌
SA-CONTRIB-2023-030 and 2.x
Active
Code
Created
12 months ago
v2.0
🇺🇸
United States
cmlara
5 months ago
📌
Add support for Gitlab Pages and move some data from README
Fixed
Documentation
Created
6 months ago
v2.0
🇺🇸
United States
cmlara
5 months ago
🐛
validateRequest() does not convert integers to zero padded strings before calling validate()
Fixed
Code
Created
6 months ago
v1.0
🇺🇸
United States
cmlara
5 months ago
📌
Replace TFA with 2FA in all user strings
Needs work
User interface
Created
over 1 year ago
v2.0
🇭🇺
Hungary
Pasqualle
5 months ago
🐛
"validation skipped" value keeps incrementing, locks out users
Closed: outdated
Code
Created
7 months ago
v2.0
jeremy_estes
5 months ago
📌
Restore Code Coverage reporting to GitLab CI Runs
Fixed
Code
Created
6 months ago
v2.0
🇺🇸
United States
cmlara
5 months ago
🐛
Import 8.x-1.4 security fix into 2.x
Fixed
Code
Created
7 months ago
v2.0
🇺🇸
United States
cmlara
5 months ago
✨
Redirect to validation setup after login without tfa
Fixed
Code
Created
over 4 years ago
v1.0
🇺🇸
United States
zopa
5 months ago
📌
10.2.0 Deprecation Clenaup
Fixed
Code
Created
6 months ago
v2.0
🇺🇸
United States
cmlara
5 months ago
🐛
user.data service returns strings not integers
Fixed
Code
Created
6 months ago
v2.0
🇺🇸
United States
cmlara
5 months ago
📌
Remove referneces to Twillo Authy desktop apps
Active
Code
Created
6 months ago
v2.0
🇺🇸
United States
cmlara
6 months ago
✨
Allow Drush uli login command to bypass TFA
Needs work
Code
Created
about 9 years ago
v2.0
🇨🇦
Canada
scor
6 months ago
🐛
TFA switches to dev branch
Closed: cannot reproduce
Miscellaneous
Created
6 months ago
v1.4
🇺🇸
United States
Trigve Hagen
6 months ago
📌
Public Followup for 8.x-1.3 security release.
Fixed
Documentation
Created
8 months ago
v1.0
🇺🇸
United States
cmlara
6 months ago
📌
Switch to spomky-labs/otphp
Fixed
Miscellaneous
Created
over 1 year ago
v2.0
🇵🇹
Portugal
jcnventura
6 months ago
💬
Cannot update form front end?
Fixed
User interface
Created
7 months ago
v2.0
obsidianicon
6 months ago
✨
Allow TFA authentication through REST routes
Closed: outdated
Code
Created
12 months ago
v2.0
🇺🇸
United States
cmlara
6 months ago
✨
Support Symfony Mailer
Needs work
Code
Created
6 months ago
v2.0
🇳🇱
Netherlands
Tess Bakker
6 months ago
✨
Provide drush command to reset a user's TFA data
Fixed
Code
Created
10 months ago
v1.0
🇦🇺
Australia
silverham
6 months ago
📌
Remove TfaUserDataTrait and refactor to a TfaUserData object.
Active
Code
Created
6 months ago
v2.0
🇺🇸
United States
cmlara
6 months ago
🌱
[META] Convert fail-open code executions to fail-secure alternatives
Active
Code
Created
6 months ago
v2.0
🇺🇸
United States
cmlara
6 months ago
🐛
Wrong domain name for Google Authenticator on TOTP and HOTP setup page
Closed: duplicate
Miscellaneous
Created
8 months ago
v2.0
🇮🇳
India
Bhanu951
7 months ago
🐛
Trusted browser message when set to 1 day is "1 days" plural
Fixed
Code
Created
over 1 year ago
v2.0
🇬🇧
United Kingdom
dunx
7 months ago
📌
Decorate the user.auth service
Fixed
Code
Created
11 months ago
v2.0
🇺🇸
United States
cmlara
7 months ago
✨
Add ECA condition plugin "is TFA setup"
Needs review
Code
Created
7 months ago
v2.0
🇦🇺
Australia
sime
7 months ago
✨
Adopt a 'security first' focus
Fixed
Miscellaneous
Created
12 months ago
v2.0
🇺🇸
United States
cmlara
7 months ago
📌
Convert plugins to use PHP Attributes only.
Active
Code
Created
7 months ago
v2.0
🇺🇸
United States
cmlara
7 months ago
💬
Translation file for tfa 8.x-1.3 module release not found
Postponed
Code
Created
7 months ago
v1.3
🇩🇪
Germany
hexabinaer
7 months ago
🐛
storeAcceptedCode()/alreadyAcceptedCode should check token id.
Active
Code
Created
7 months ago
v2.0
🇺🇸
United States
cmlara
7 months ago
🐛
Cleanup accepted codes stored in user data
Needs work
Code
Created
about 3 years ago
v2.0
Bandana
7 months ago
📌
Deprecate the services_tfa module
Fixed
Code
Created
8 months ago
v1.0
🇵🇹
Portugal
jcnventura
7 months ago
📌
Remove usage of alreadyAcceptedCode()/storeAccepedCode() in the TOTP,HOTP, Recovery Code plugins.
Active
Code
Created
7 months ago
v2.0
🇺🇸
United States
cmlara
7 months ago
📌
Require plugins to be responsible for locking
Active
Code
Created
7 months ago
v2.0
🇺🇸
United States
cmlara
7 months ago
🐛
Allow TFA bypass during password reset by default for super admin (uid1)
Closed: works as designed
Code
Created
8 months ago
v1.0
🇮🇳
India
Bhanu951
7 months ago
🐛
Cleanup TfaTrustedBrowser Plugin save logic
Fixed
Code
Created
8 months ago
v2.0
🇮🇳
India
Bhanu951
7 months ago
🐛
Maintenance mode blocks TOTP TFA entry
Fixed
Code
Created
about 8 years ago
v2.0
Leeteq
8 months ago
📌
Import canLoginWithoutTfa from SA-CONTRIB-2023-030
Fixed
Code
Created
8 months ago
v2.0
🇺🇸
United States
cmlara
8 months ago
🐛
Authenticator links clean up
Fixed
Code
Created
10 months ago
v1.0
🇦🇺
Australia
yeniatencio
8 months ago
📌
TfaTrustedBrowser::validateForm() missing return statement.
Needs review
Code
Created
9 months ago
v1.0
🇺🇸
United States
cmlara
8 months ago
✨
User account should be marked as updated when TFA is updated
Active
Code
Created
almost 8 years ago
v2.0
🇨🇦
Canada
cdeces
8 months ago
📌
Update PHPStan Baseline
Fixed
Code
Created
8 months ago
v2.0
🇺🇸
United States
cmlara
8 months ago
🐛
TFA disable screen cancel button always redirects to current user TFA page
Closed: duplicate
Code
Created
8 months ago
v1.2
🇦🇺
Australia
yeniatencio
8 months ago
🐛
Unable to Disable TFA for a user.
Fixed
Code
Created
9 months ago
v2.0
🇺🇸
United States
cmlara
8 months ago
📌
Mark classes as internal/final/api as applicable
Needs work
Code
Created
9 months ago
v2.0
🇺🇸
United States
cmlara
8 months ago
📌
Convert plugin configuration to Config Entities
Active
Code
Created
8 months ago
v2.0
🇺🇸
United States
cmlara
8 months ago
🐛
Google Authenticator Link is not working
Closed: duplicate
Code
Created
8 months ago
v1.3
🇳🇱
Netherlands
zebda
8 months ago
📌
Change Remaining login attempts message type from error to warning.
Active
User interface
Created
8 months ago
v2.0
🇮🇳
India
Bhanu951
8 months ago
🐛
TFA prevents Devel switch user
Closed: works as designed
Code
Created
about 5 years ago
v2.0
🇳🇱
Netherlands
edvanleeuwen
8 months ago
📌
Context alter documentaion missing
Needs work
Documentation
Created
over 9 years ago
v2.0
🇮🇳
India
subhojit777
8 months ago
📌
Add validateRequest() to TfaValidationInterface
Fixed
Code
Created
10 months ago
v2.0
🇺🇸
United States
cmlara
8 months ago
🐛
Check if Help module is enabled
Needs work
User interface
Created
over 8 years ago
v2.0
🇳🇱
Netherlands
michaelmol
8 months ago
🐛
Self-service password reset not working when tfa is enabled
Postponed: needs info
Code
Created
over 5 years ago
v2.0
🇺🇸
United States
anthonyf
8 months ago
📌
Cleanup new sniffs (automated)
Fixed
Code
Created
9 months ago
v2.0
🇺🇸
United States
cmlara
8 months ago
🐛
TfaTotp: Google Authenticator link no longer valid
Closed: duplicate
Code
Created
8 months ago
v2.0
🇩🇪
Germany
giuspe
8 months ago
📌
Adopt GitlabCi
Fixed
Miscellaneous
Created
10 months ago
v2.0
🇺🇸
United States
cmlara
8 months ago
💬
Setup tfa message in custom block
Fixed
Documentation
Created
9 months ago
v1.2
🇳🇱
Netherlands
zebda
8 months ago
📌
Move TfaLoginContextTrait back to a dedicated Class and add factory.
Fixed
Code
Created
9 months ago
v2.0
🇺🇸
United States
cmlara
8 months ago
💬
Reset authentication
Closed: works as designed
Code
Created
9 months ago
v1.2
🇳🇱
Netherlands
zebda
8 months ago
📌
Update TFA wording to 2FA
Closed: duplicate
Miscellaneous
Created
8 months ago
v1.2
🇦🇺
Australia
yeniatencio
8 months ago
📌
Convert TFA plugin forms to use subforms
Active
Code
Created
9 months ago
v2.0
🇺🇸
United States
cmlara
9 months ago
📌
Use statements should be sorted alphabetically
Closed: outdated
Code
Created
10 months ago
v2.0
🇮🇳
India
roshni27
9 months ago
contrib
.social
Blog
FAQ
Discussions
Production build 0.69.0
2024