Promotions

  • Advanced Professional Gantt Dolibarr

    Would you like to see your project evolve in an efficient and structured way? The Gantt Professional Advanced Module allows you to manage all your projects in one place, without the need to use Gantt Project. We believe that you can effectively manage your projects with the right tools in place, and the Gantt Professional Advanced Module is one of them.

    300.00 €  (600€)
  • Advanced Notifier

    Our advanced notification module is designed to enhance the efficiency of your company by keeping you informed of events directly from your Dolibarr interface.

    125.00 €  (300€)

New products

  • Online Office Basic

    OnlineOffice is a Dolibarr module that securely connects Dolibarr with an online office server such as Collabora Online. Open and edit documents directly from Dolibarr in your browser, with centralized permission checks, and save-back of modified files into Dolibarr.

    48.00 €
  • ERPkit — Marketplace Sync for Dolibarr

    Sync your Dolibarr products with Shopify, WooCommerce, and PrestaShop. Push prices, stock, weight, and barcodes automatically. Import orders, generate invoices, send fulfillment, and produce Factur-X electronic invoices — all from Dolibarr. Free module, connects to the ERPkit SaaS. Your data stays in your Dolibarr — nothing is stored on our servers.

    FREE

Two-Factor Authentication Pro v6.0 — Multi-device, TOTP, WebAuthn/FIDO2, Backup codes

mp24503d20260401013009

The most complete two-factor authentication for Dolibarr. TOTP (Google Authenticator, Authy...), WebAuthn/FIDO2 (YubiKey, Touch ID, Windows Hello), backup codes, multi-device, AES-256 encryption, brute-force protection.

89.00 €
Excl. tax

  • Author Theo Pequignot
  • Module version 6.0.0
  • Release date 04/01/2026
  • Access to download and updates 2 years
  • How to contact support contact@theopequignot.fr
  • Compatibility Dolibarr V14 - V22   -   PHP7.4 - 8.4
  • Last update 04/05/2026 04:37 PM

More info...

WHY THIS MODULE?

Two-factor authentication (2FA) has become essential to secure access to your ERP. A simple password is no longer enough. This module adds a robust layer of security to every Dolibarr login.


KEY FEATURES

Multi-method authentication
TOTP — 6-digit time-based codes (30s), compatible with Google Authenticator, Authy, Microsoft Authenticator, 1Password, Bitwarden, Aegis, FreeOTP
WebAuthn/FIDO2 — Hardware keys (YubiKey), Touch ID, Face ID, Windows Hello
Backup codes — 10 one-time-use codes, hashed with bcrypt

Multi-device support
• Multiple devices per user (e.g., phone + YubiKey)
• Full management: add, rename, delete from the interface
• In case of loss, use another device or a backup code

Enterprise-grade security
• AES-256-CBC encryption of TOTP secrets in the database
• Anti brute-force: lockout after 5 attempts within 15 minutes per IP
• Anti-replay: a TOTP code can only be used once
• Full audit log (IP, result, method, device)
• CSRF protection on all forms
• Security HTTP headers (X-Frame-Options, CSP, no-store)

Smart enrollment
• 2FA setup automatically предложed at first login
• Mandatory or optional mode (MOD2FA_MANDATORY constant)
• QR code generated locally (no external calls)
• Force re-enrollment per user from admin panel

Full administration
• Dashboard: 24h statistics, adoption rate, blocked attempts
• User list with 2FA status, devices, last login
• Individual 2FA reset, force re-enrollment, regenerate backup codes
• Filterable audit log
• Old logs cleanup
• Secrets re-encryption (maintenance)

Polished interface
• Standalone pages with clean design, independent from Dolibarr theme
• Works on all themes without contrast issues
• Responsive and accessible


INSTALLATION

  1. Unzip mod2fa-6.0.0.zip into htdocs/custom/
  2. Go to: Setup > Modules/Applications > Others
  3. Enable Mod2fa
  4. Database tables are created automatically
  5. Users will be guided at their next login

REQUIREMENTS


• Dolibarr 14.0 or higher
• PHP 7.4 or higher (compatible with 8.0 — 8.4)
• MySQL 5.7+ / MariaDB 10.3+
• OpenSSL required
• HTTPS required only for WebAuthn




If you think this module is a fork of another one (published after the first one) or violates some terms or conditions of use (for users or vendors), you can make a report at dolistore@dolibarr.org