Umbraco Two-Factor Authentication (2FA)

The Umbraco Two Factor Authentication (Umbraco TFA/Umbraco 2FA) module provides a second level of security for Umbraco websites. Several 2FA / MFA methods are supported by Umbraco Two Factor Authentication (Umbraco 2FA/Umbraco TFA), including TOTP like Google Authenticator, Duo Authenticator, Microsoft Authenticator, Okta Verify Authenticator, Auth Authenticator, LastPass Authenticator, OTP over email, OTP over SMS, OTP over call, Security Questions (KBA), and backup methods.
Contact us at umbracosupport@xecurify.com and we'll help you set up Umbraco Two-Factor Authentication module for your site in no time.

Need Help? Schedule a free meeting with our experts right away using Calendly

Book Your Slot

Your Umbraco sites are more secure thanks to the Umbraco Two Factor Authentication (Umbraco 2FA/Umbraco TFA) module's additional layer of authentication. Two factor authentication, or 2FA, is a particular kind of MFA that improves the security of your website. To protect sensitive data, you must verify that the users attempting to access it are who they say they are. With 2FA, it is possible to successfully protect against security concerns including phishing, brute-force attacks, credential exploitation, and others that target user passwords and accounts.

Role-based 2FA, Domain-based 2FA, IP whitelisting, Customizable KBA questions, Reset 2FA method, Customizable Email and SMS template, Configure Your Own SMS and Email Gateway, etc. are some of the features provided by the Umbraco Two Factor Authentication (TFA/2FA) module.

Features

Two-Factor Authentication

Two-factor authentication for Umbraco members during login using a variety of tools, including hardware tokens, text messages, and more

Passwordless Login

Gives users the option to log in using their username and OTP, eliminating the need to type their password

Role Based 2FA

You can enable two-factor authentication for specific roles (2FA). 2FA will be activated in accordance with the configurations you saved

Domain Based 2FA

For specific domains, Umbraco two-factor authentication can be enabled (Umbraco 2FA). If the user is a member of the given domain, 2FA will be activated

Customization

It is possible to alter the email and SMS templates used to send the OTP or the notification. The duration of OTP and the expiration date both can be changed or modified

Benefits

Strong Authentication

Gives your username and password an additional degree of security, protecting you against fraudulent logins. Protect your users from malicious hackers

Deploy Quickly

Installing and configuring Umbraco 2FA is simple. It takes only a few minutes to set it up for each of your users

Highly Secure

If your phone is lost or stolen, we offer backup login methods including OTP through email and security questions. You can log in using a one-time passcode generated by your app even if your phone is offline

24/7 Support

We provide world-class continuous assistance and will make every effort to resolve any questions or concerns you may have

Multiple Authentication Methods

The miniOrange Authenticator App, which enables push notifications, soft tokens, and QR code authentication, are compatible with all phone models

Supported Methods

Authenticator Apps

Apps like Google, Microsoft and Okta Authenticatiors generate an one-time password (OTP) to confirm its you logging in to a website or a service.

OTP over SMS

It is a secure authorization method where a numeric or alphanumeric code is sent to your mobile number. It is also the most reliable two-factor authentication method

OTP over Email

This enables you to authenticate using the one-time password (OTP) that is sent to the registered email address. You can use this OTP to authenticate on any device

Security Questions

Security questions are substitutes to your primary authentication method where a set of questions are being asked if you have forgotten your password

Push Notification

These are small pop-up messages sent to the user's device usually by a mobile application used for authentication of users

Hardware Token

A hardware token is a portable security device used for authenticating into a system, examples being electronic key fobs and OTP tokens

OTP over WhatsApp

You can even send OTP over WhatsApp which will authorize users to securely login by entering a numeric code.

OTP over Telegram

You can even send OTP over Telegram which will authorize users to securely login by entering a numeric code.