Was looking around and did not found any topics about additional security for Kirby admin panel authentication.
Problem, that client wants additional security (actually good request) - Google 2FA (2-Step or two factor authenticator) for Kirby admin panel.
Currently Im looking at this lib: https://github.com/PHPGangsta/GoogleAuthenticator
And also looking on to this tutorial: https://www.spaceotechnologies.com/google-two-factor-authentication-tutorial-php/
Currently Im planing in /admin/panel/app/controllers/auth.php implement one of mentioned solutions.
Thing that confuses me - that in existing examples there are mentioned QR codes, but I do not need them - after entering user/pass in Kirby admin login I want next screen for entering authentication number which is shown in Google authenticator. And only after correct number user would be forwarded to Kirby admin panel.
Any advice or tip would be greatly appreciated.
Don’t know if you are aware of this plugin: https://github.com/pedroborges/kirby-authenticator, maybe it helps.
Was not aware of this plugin, thank You! Although its beta and does not have much features will look in to it, looks promising. From first look - it also has QR code, which I want to omit.
The plugin looks promising, but has no changes for 6 month… not good.
@Bristolscript_ The QR Code is only for registration, to initialize the authentication app. Do you want to type im the random start-code instead?
Hi there!
Is this plugin still working?
Thank you!
With Kirby 2? Don’t know, you would have to test or get in touch with the developer. The plugin was developed 2 years ago and the status still says Beta.
Thank you for your kind reply!
I see it was a Beta version for V2… that’s why I asked.
I was looking a 2-factor authentication to secure the panel access… do you have suggestions on new plugins for v3?
Thank you
I’m not aware of a plugin for Kirby 3, no. I think you can achieve this with a custom login view.