Skip to content

Two-Factor Auth

Humble.Umbraco.TwoFactorAuth can require authenticator-app two-factor authentication instead of leaving stronger backoffice sign-in optional.

  • Time-based one-time passwords for backoffice users.
  • Member-provider support following Umbraco’s documented integration conventions.
  • One-time recovery codes generated at enrollment and stored as hashes.
  • Server-side Management API enforcement when explicitly enabled, with enrollment and sign-out paths kept reachable.

The enforcement policy is opt-in through application configuration.