PHPackages derhansen/mfa\_yubikey - PHPackages - PHPackages [Skip to content](#main-content)[PHPackages](/)[Directory](/)[Categories](/categories)[Trending](/trending)[Leaderboard](/leaderboard)[Changelog](/changelog)[Analyze](/analyze)[Collections](/collections)[Log in](/login)[Sign up](/register) 1. [Directory](/) 2. / 3. [Authentication & Authorization](/categories/authentication) 4. / 5. derhansen/mfa\_yubikey ActiveTypo3-cms-extension[Authentication & Authorization](/categories/authentication) derhansen/mfa\_yubikey ====================== YubiKey OTP MFA provider - YubiKey OTP MFA provider for the TYPO3 backend login. 4.0.2(2mo ago)816.7k↓28.9%2[1 PRs](https://github.com/derhansen/mfa_yubikey/pulls)GPL-2.0-or-laterPHPCI passing Since Feb 23Pushed 2mo ago2 watchersCompare [ Source](https://github.com/derhansen/mfa_yubikey)[ Packagist](https://packagist.org/packages/derhansen/mfa_yubikey)[ Docs](https://github.com/derhansen/mfa_yubikey)[ Fund](https://www.paypal.me/derhansen)[ RSS](/packages/derhansen-mfa-yubikey/feed)WikiDiscussions main Synced 2d ago READMEChangelog (10)Dependencies (3)Versions (20)Used By (0) YubiKey two-factor MFA authentication for TYPO3 =============================================== [](#yubikey-two-factor-mfa-authentication-for-typo3) [![CI](https://github.com/derhansen/mfa_yubikey/actions/workflows/ci.yml/badge.svg)](https://github.com/derhansen/mfa_yubikey/actions/workflows/ci.yml)[![Project Status: Active – The project has reached a stable, usable state and is being actively developed.](https://camo.githubusercontent.com/39c688bf243eeb6d3bfc529dcf3cb27443613deb696c8fa9f49bccf1e63e3bef/68747470733a2f2f7777772e7265706f7374617475732e6f72672f6261646765732f6c61746573742f6163746976652e737667)](https://www.repostatus.org/#active) What is it? ----------- [](#what-is-it) A MFA provider for TYPO3 CMS which implements YubiKey OTP authentication Screenshot ---------- [](#screenshot) [![Edit YubiKey setup](/Documentation/Images/mfa_yubikey_edit.png)](/Documentation/Images/mfa_yubikey_edit.png) Documentation ------------- [](#documentation) Configuration steps: 1. Obtain Yubico Client ID and Secret Key at 2. Enter you Yubico Client ID and Yubico Client Key in the extension settings 3. Switch to backend user settings and choose "Manage multi-factor authentication" in "Account security" tab 4. Setup the "YubiKey OTP MFA authentication" MFA provider by adding at least one YubiKey 5. (Optional) Ensure to set the "YubiKey OTP MFA authentication" as default MFA provider ### Using a self-hosted YubiCloud instance [](#using-a-self-hosted-yubicloud-instance) Instead of using the official Yubico YubiCloud validation service, you can run your own OTP validation server. This is useful for organizations that require full control over their infrastructure or cannot use external services. To use a self-hosted validation server: 1. Set up a self-hosted OTP validation server (see [Yubico's self-hosted OTP validation guide](https://developers.yubico.com/OTP/Guides/Self-hosted_OTP_validation.html)) 2. In the extension settings, set the "YubiCloud API URL" to the URL of your own validation server 3. Enter the Client ID and Secret Key configured on your self-hosted instance Versions -------- [](#versions) VersionTYPO3PHPSupport/Development4.x14.x8.2 - 8.5Features, Bugfixes, Security Updates3.x13.x8.2 - 8.5Features, Bugfixes, Security Updates2.x12.x8.1 - 8.4Security Updates1.x11.57.4 - 8.4Support droppedReporting a Vulnerability ------------------------- [](#reporting-a-vulnerability) Please report vulnerabilities to . Support and updates ------------------- [](#support-and-updates) The extension is hosted on GitHub. Please report feedback, bugs and change requests directly at [https://github.com/derhansen/mfa\_yubikey](https://github.com/derhansen/mfa_yubikey) ### Health Score 53 — FairBetter than 96% of packages Maintenance86 Actively maintained with recent releases Popularity34 Limited adoption so far Community16 Small or concentrated contributor base Maturity62 Established project with proven stability Bus Factor1 Top contributor holds 93% of commits — single point of failure How is this calculated?**Maintenance (25%)** — Last commit recency, latest release date, and issue-to-star ratio. Uses a 2-year decay window. **Popularity (30%)** — Total and monthly downloads, GitHub stars, and forks. Logarithmic scaling prevents top-heavy scores. **Community (15%)** — Contributors, dependents, forks, watchers, and maintainers. Measures real ecosystem engagement. **Maturity (30%)** — Project age, version count, PHP version support, and release stability. ### Release Activity Cadence Every ~134 days Recently: every ~126 days Total 15 Last Release 70d ago Major Versions 0.1.2 → 1.0.02021-10-12 1.x-dev → 2.0.02022-12-31 2.x-dev → 3.0.02024-07-20 3.x-dev → 4.0.02026-03-23 PHP version history (2 changes)0.1.0PHP ^7.4 1.0.0PHP ^7.4 || ^8.0 ### Community Maintainers ![](https://www.gravatar.com/avatar/d52103f3af5442e3cf7f3fb14456dc51f311af529394f0325bcd0a4e8d407947?d=identicon)[derhansen](/maintainers/derhansen) --- Top Contributors [![derhansen](https://avatars.githubusercontent.com/u/2629896?v=4)](https://github.com/derhansen "derhansen (198 commits)")[![abeutel](https://avatars.githubusercontent.com/u/434679?v=4)](https://github.com/abeutel "abeutel (5 commits)")[![bnf](https://avatars.githubusercontent.com/u/473155?v=4)](https://github.com/bnf "bnf (4 commits)")[![o-ba](https://avatars.githubusercontent.com/u/8812114?v=4)](https://github.com/o-ba "o-ba (3 commits)")[![dmitryd](https://avatars.githubusercontent.com/u/306133?v=4)](https://github.com/dmitryd "dmitryd (1 commits)")[![klali](https://avatars.githubusercontent.com/u/264413?v=4)](https://github.com/klali "klali (1 commits)")[![ohader](https://avatars.githubusercontent.com/u/402145?v=4)](https://github.com/ohader "ohader (1 commits)") --- Tags Two Factor AuthenticationTYPO3 CMSyubikeyMFA provider ### Embed Badge ![Health badge](/badges/derhansen-mfa-yubikey/health.svg) ``` [![Health](https://phpackages.com/badges/derhansen-mfa-yubikey/health.svg)](https://phpackages.com/packages/derhansen-mfa-yubikey) ``` ### Alternatives [friendsoftypo3/content-blocks TYPO3 CMS Content Blocks - Content Types API | Define reusable components via YAML 103519.9k53](/packages/friendsoftypo3-content-blocks)[derhansen/sf_yubikey YubiKey two-factor OTP authentication - An authentication service for TYPO3 which extends the backend/frontend login by YubiKey OTP two-factor authentication. 1333.6k](/packages/derhansen-sf-yubikey)[typo3/cms-felogin TYPO3 CMS Frontend Login - A template-based plugin to log in website users in the TYPO3 frontend. 117.2M132](/packages/typo3-cms-felogin)[mfc/oauth2 Generic OAuth2 authentication and authorization for TYPO3 CMS 11310.1k2](/packages/mfc-oauth2)[derhansen/sf_event_mgt Event management and registration - Configurable event management and registration extension based on ExtBase and Fluid 66338.4k10](/packages/derhansen-sf-event-mgt)[brotkrueml/schema Embedding schema.org vocabulary - API and view helpers for schema.org markup 34653.7k16](/packages/brotkrueml-schema) PHPackages © 2026 [Directory](/)[Categories](/categories)[Trending](/trending)[Changelog](/changelog)[Analyze](/analyze)