Joomla Multi-Factor Authentication (MFA)

Yes, the extension is fully compatible with Joomla 3, 4, 5, and 6. It is designed to integrate seamlessly with the latest Joomla versions and works out-of-the-box with all standard Joomla themes. This ensures that as you upgrade your CMS, your site’s security remains intact without any compatibility issues.

The plugin supports a wide variety of MFA methods to suit different user needs, including:

• Authenticator Apps: Google Authenticator, Microsoft Authenticator, Authy, etc.
• OTP Services: One-Time Passwords sent via Email or SMS.
• Passwordless Login: Secure login using just a username and a verified second factor.
• Security Questions (KBA): Knowledge-based authentication for an added layer of verification.

Absolutely. One of the advanced features of this extension is Role-Based MFA Control. This allows administrators to mandate two-factor authentication for high-privileged roles (like Super Users or Administrators) while keeping it optional for standard users. You can also restrict MFA based on specific domains or IP addresses.

The extension provides multiple recovery options to prevent account lockout. You can use Backup Codes generated during the initial setup or a Backdoor URL (accessible only by administrators) to regain access. These backup methods ensure that legitimate users are never permanently locked out of their accounts.

Yes, the Remember My Device feature allows users to perform multi-factor authentication once and skip it for a specified number of days on that same browser. This balances high security with a smooth user experience, reducing friction for frequent users while still protecting the login process from unauthorized devices.

Yes, the miniOrange Joomla 2FA plugin is highly flexible and supports Custom Gateway Integration. While it comes with built-in support for popular providers like Twilio, Amazon SNS, and ClickSend, you can also configure your own custom SMS or Email gateway to send OTPs to your users.