PHPackages                             derhansen/mfa\_yubikey - PHPackages - PHPackages  [Skip to content](#main-content)[PHPackages](/)[Directory](/)[Categories](/categories)[Trending](/trending)[Leaderboard](/leaderboard)[Changelog](/changelog)[Analyze](/analyze)[Collections](/collections)[Log in](/login)[Sign up](/register)

1. [Directory](/)
2. /
3. [Authentication &amp; Authorization](/categories/authentication)
4. /
5. derhansen/mfa\_yubikey

ActiveTypo3-cms-extension[Authentication &amp; Authorization](/categories/authentication)

derhansen/mfa\_yubikey
======================

YubiKey OTP MFA provider for the TYPO3 backend login.

4.0.0(1mo ago)714.0k↓43.6%2[2 issues](https://github.com/derhansen/mfa_yubikey/issues)[1 PRs](https://github.com/derhansen/mfa_yubikey/pulls)GPL-2.0-or-laterPHPCI passing

Since Feb 23Pushed 1mo ago2 watchersCompare

[ Source](https://github.com/derhansen/mfa_yubikey)[ Packagist](https://packagist.org/packages/derhansen/mfa_yubikey)[ Docs](https://github.com/derhansen/mfa_yubikey)[ Fund](https://www.paypal.me/derhansen)[ RSS](/packages/derhansen-mfa-yubikey/feed)WikiDiscussions main Synced 1mo ago

READMEChangelog (10)Dependencies (2)Versions (18)Used By (0)

YubiKey two-factor MFA authentication for TYPO3
===============================================

[](#yubikey-two-factor-mfa-authentication-for-typo3)

[![CI](https://github.com/derhansen/mfa_yubikey/actions/workflows/ci.yml/badge.svg)](https://github.com/derhansen/mfa_yubikey/actions/workflows/ci.yml)[![Project Status: Active – The project has reached a stable, usable state and is being actively developed.](https://camo.githubusercontent.com/39c688bf243eeb6d3bfc529dcf3cb27443613deb696c8fa9f49bccf1e63e3bef/68747470733a2f2f7777772e7265706f7374617475732e6f72672f6261646765732f6c61746573742f6163746976652e737667)](https://www.repostatus.org/#active)

What is it?
-----------

[](#what-is-it)

A MFA provider for TYPO3 CMS which implements YubiKey OTP authentication

Screenshot
----------

[](#screenshot)

[![Edit YubiKey setup](/Documentation/Images/mfa_yubikey_edit.png)](/Documentation/Images/mfa_yubikey_edit.png)

Documentation
-------------

[](#documentation)

Configuration steps:

1. Obtain Yubico Client ID and Secret Key at
2. Enter you Yubico Client ID and Yubico Client Key in the extension settings
3. Switch to backend user settings and choose "Manage multi-factor authentication" in "Account security" tab
4. Setup the "YubiKey OTP MFA authentication" MFA provider by adding at least one YubiKey
5. (Optional) Ensure to set the "YubiKey OTP MFA authentication" as default MFA provider

Versions
--------

[](#versions)

VersionTYPO3PHPSupport/Development4.x14.x8.2 - 8.5Features, Bugfixes, Security Updates3.x13.x8.2 - 8.5Features, Bugfixes, Security Updates2.x12.x8.1 - 8.4Security Updates1.x11.57.4 - 8.4Support droppedReporting a Vulnerability
-------------------------

[](#reporting-a-vulnerability)

Please report vulnerabilities to .

Support and updates
-------------------

[](#support-and-updates)

The extension is hosted on GitHub. Please report feedback, bugs and change requests directly at [https://github.com/derhansen/mfa\_yubikey](https://github.com/derhansen/mfa_yubikey)

###  Health Score

51

—

FairBetter than 96% of packages

Maintenance83

Actively maintained with recent releases

Popularity33

Limited adoption so far

Community16

Small or concentrated contributor base

Maturity61

Established project with proven stability

 Bus Factor1

Top contributor holds 92.8% of commits — single point of failure

How is this calculated?**Maintenance (25%)** — Last commit recency, latest release date, and issue-to-star ratio. Uses a 2-year decay window.

**Popularity (30%)** — Total and monthly downloads, GitHub stars, and forks. Logarithmic scaling prevents top-heavy scores.

**Community (15%)** — Contributors, dependents, forks, watchers, and maintainers. Measures real ecosystem engagement.

**Maturity (30%)** — Project age, version count, PHP version support, and release stability.

###  Release Activity

Cadence

Every ~154 days

Recently: every ~194 days

Total

13

Last Release

56d ago

Major Versions

0.1.2 → 1.0.02021-10-12

1.x-dev → 2.0.02022-12-31

2.x-dev → 3.0.02024-07-20

3.x-dev → 4.0.02026-03-23

PHP version history (2 changes)0.1.0PHP ^7.4

1.0.0PHP ^7.4 || ^8.0

### Community

Maintainers

![](https://www.gravatar.com/avatar/d52103f3af5442e3cf7f3fb14456dc51f311af529394f0325bcd0a4e8d407947?d=identicon)[derhansen](/maintainers/derhansen)

---

Top Contributors

[![derhansen](https://avatars.githubusercontent.com/u/2629896?v=4)](https://github.com/derhansen "derhansen (194 commits)")[![abeutel](https://avatars.githubusercontent.com/u/434679?v=4)](https://github.com/abeutel "abeutel (5 commits)")[![bnf](https://avatars.githubusercontent.com/u/473155?v=4)](https://github.com/bnf "bnf (4 commits)")[![o-ba](https://avatars.githubusercontent.com/u/8812114?v=4)](https://github.com/o-ba "o-ba (3 commits)")[![dmitryd](https://avatars.githubusercontent.com/u/306133?v=4)](https://github.com/dmitryd "dmitryd (1 commits)")[![klali](https://avatars.githubusercontent.com/u/264413?v=4)](https://github.com/klali "klali (1 commits)")[![ohader](https://avatars.githubusercontent.com/u/402145?v=4)](https://github.com/ohader "ohader (1 commits)")

---

Tags

Two Factor AuthenticationTYPO3 CMSyubikeyMFA provider

### Embed Badge

![Health badge](/badges/derhansen-mfa-yubikey/health.svg)

```
[![Health](https://phpackages.com/badges/derhansen-mfa-yubikey/health.svg)](https://phpackages.com/packages/derhansen-mfa-yubikey)
```

###  Alternatives

[pragmarx/google2fa

A One Time Password Authentication package, compatible with Google Authenticator.

2.0k82.4M164](/packages/pragmarx-google2fa)[pragmarx/google2fa-laravel

A One Time Password Authentication package, compatible with Google Authenticator.

1.0k15.5M63](/packages/pragmarx-google2fa-laravel)[robthree/twofactorauth

Two Factor Authentication

1.2k10.5M66](/packages/robthree-twofactorauth)[pragmarx/google2fa-qrcode

QR Code package for Google2FA

12124.6M37](/packages/pragmarx-google2fa-qrcode)[paragonie/multi-factor

Vendor-agnostic two-factor authentication library

142195.5k2](/packages/paragonie-multi-factor)[ellaisys/aws-cognito

AWS Cognito package that allows Auth and other related features using the AWS SDK for PHP

120220.7k1](/packages/ellaisys-aws-cognito)

PHPackages © 2026

[Directory](/)[Categories](/categories)[Trending](/trending)[Changelog](/changelog)[Analyze](/analyze)
