PHPackages                             paul999/tfa - PHPackages - PHPackages  [Skip to content](#main-content)[PHPackages](/)[Directory](/)[Categories](/categories)[Trending](/trending)[Leaderboard](/leaderboard)[Changelog](/changelog)[Analyze](/analyze)[Collections](/collections)[Log in](/login)[Sign up](/register)

1. [Directory](/)
2. /
3. [Authentication &amp; Authorization](/categories/authentication)
4. /
5. paul999/tfa

ActivePhpbb-extension[Authentication &amp; Authorization](/categories/authentication)

paul999/tfa
===========

This extension adds support for two factor authentication into your phpBB board.

0.0.5(6y ago)18513[7 PRs](https://github.com/paul999/phpbb_2fa/pulls)GPL-2.0-onlyPHPPHP &gt;=5.4.0

Since Oct 31Pushed 2y ago6 watchersCompare

[ Source](https://github.com/paul999/phpbb_2fa)[ Packagist](https://packagist.org/packages/paul999/tfa)[ Docs](http://www.phpbb-2fa.com)[ RSS](/packages/paul999-tfa/feed)WikiDiscussions master Synced 1mo ago

READMEChangelog (5)Dependencies (6)Versions (8)Used By (0)

phpbb\_2fa
==========

[](#phpbb_2fa)

[![Build Status](https://camo.githubusercontent.com/6266edd47ee75017db9c72c231eccf1f1536b59a62808ba5ebc1963ae41ab893/68747470733a2f2f7472617669732d63692e6f72672f7061756c3939392f70687062625f3266612e737667)](https://travis-ci.org/paul999/phpbb_2fa)[![Scrutinizer Code Quality](https://camo.githubusercontent.com/4bceae1b76647a6ed819e7edb9171025d4172bf23e58f04605986db86cafb28f/68747470733a2f2f7363727574696e697a65722d63692e636f6d2f672f7061756c3939392f70687062625f3266612f6261646765732f7175616c6974792d73636f72652e706e673f623d6d6173746572)](https://scrutinizer-ci.com/g/paul999/phpbb_2fa/?branch=master)

phpBB extension to implement 2FA
================================

[](#phpbb-extension-to-implement-2fa)

This extension adds support for two factor authentication using several different security keys. Currently, the following security keys are available by default:

- U2F (See below)
- Google authenticator (Or compatible)
- Backup keys

New type of keys can be added by following the instructions in the [documentation](https://www.phpbbextensions.io/tfa/).

You can set several options within this extension:

- Disable 2FA completly (Basicly disabling the extension!)
- Do not require 2FA, but give it as option to users
- Require 2FA for users with a\_ permissions only, and only to login for the ACP
- Require 2FA for users with a\_ permissions only
- Require 2FA for users with a\_ or m\_ permissions only
- Require 2FA for all users

Depending on the choosen setting 2FA, the board will be limit available for the user if a 2FA key is required. Only when the option `Do not require 2FA, but give it as option to users` is selected, the board won't be limited.

U2F
===

[](#u2f)

Currently, the browser support for U2F is limited:

Supported:

- Google Chrome (Version 41 and later)

Not supported:

- Safari
- Firefox (Not supported yet. Support will be added in a upcoming release)
- Internet Explorer
- Edge

[Test if your browser supports U2F](https://demo.yubico.com/u2f)

You will need a U2F capable security key for this to work. [Yubico](https://www.yubico.com/) (and others) does provide them.

Besides the browser requirements, U2F requires that your board runs under SSL. Without SSL the U2F key won't work, and you will not be able to select this type of key to add. This is a limitation from U2F.

Please note that this extension currently is build on the U2F protocol, and doesn't support the new WebAuthn yet. Support for WebAuthn might be added later (Including extra browser support).

Installation
============

[](#installation)

Download the latest release and and extract the download to ext/paul999/tfa/ and enable it

Updating
========

[](#updating)

Disable the extension in your ACP, extra the zip to ext/paul999/tfa and enable it

Translations
============

[](#translations)

Please create a PR on the master branch. Only translations submitted by PR are accepted. I will start merging translation PRs when stable versions are going to be released. Incomplete translations at that point won't be merged.

Bugs/Feature requests
=====================

[](#bugsfeature-requests)

Bugs and feature requests can be made at the [github issue tracker](https://github.com/paul999/phpbb_2fa/issues).

###  Health Score

28

—

LowBetter than 54% of packages

Maintenance20

Infrequent updates — may be unmaintained

Popularity15

Limited adoption so far

Community18

Small or concentrated contributor base

Maturity53

Maturing project, gaining track record

 Bus Factor1

Top contributor holds 98% of commits — single point of failure

How is this calculated?**Maintenance (25%)** — Last commit recency, latest release date, and issue-to-star ratio. Uses a 2-year decay window.

**Popularity (30%)** — Total and monthly downloads, GitHub stars, and forks. Logarithmic scaling prevents top-heavy scores.

**Community (15%)** — Contributors, dependents, forks, watchers, and maintainers. Measures real ecosystem engagement.

**Maturity (30%)** — Project age, version count, PHP version support, and release stability.

###  Release Activity

Cadence

Every ~351 days

Total

5

Last Release

2437d ago

PHP version history (2 changes)0.0.1PHP &gt;=5.3.9

0.0.2PHP &gt;=5.4.0

### Community

Maintainers

![](https://www.gravatar.com/avatar/133ea35380598b2f93888d7c840cf4384349a2ab5787811d8258c3e71fbce1a7?d=identicon)[paul999](/maintainers/paul999)

---

Top Contributors

[![paul999](https://avatars.githubusercontent.com/u/65767?v=4)](https://github.com/paul999 "paul999 (290 commits)")[![iMattPro](https://avatars.githubusercontent.com/u/303711?v=4)](https://github.com/iMattPro "iMattPro (3 commits)")[![gijs-martens](https://avatars.githubusercontent.com/u/79847451?v=4)](https://github.com/gijs-martens "gijs-martens (2 commits)")[![scrutinizer-auto-fixer](https://avatars.githubusercontent.com/u/6253494?v=4)](https://github.com/scrutinizer-auto-fixer "scrutinizer-auto-fixer (1 commits)")

### Embed Badge

![Health badge](/badges/paul999-tfa/health.svg)

```
[![Health](https://phpackages.com/badges/paul999-tfa/health.svg)](https://phpackages.com/packages/paul999-tfa)
```

###  Alternatives

[markstory/acl_extras

Additional tools for managing DB ACL in CakePHP applications.

155311.0k](/packages/markstory-acl-extras)[rainlab/user-plugin

User plugin for October CMS

11954.3k13](/packages/rainlab-user-plugin)[enygma/gauth

PHP library to generate codes compatible with the Google Authenticator clients

75129.0k1](/packages/enygma-gauth)[stuttter/wp-user-signups

The best way to manage user &amp; site sign-ups in WordPress

46208.9k3](/packages/stuttter-wp-user-signups)[winter/wn-user-plugin

User plugin for Winter CMS

1233.5k13](/packages/winter-wn-user-plugin)[rainlab/userplus-plugin

User plus plugin for October CMS

168.8k2](/packages/rainlab-userplus-plugin)

PHPackages © 2026

[Directory](/)[Categories](/categories)[Trending](/trending)[Changelog](/changelog)[Analyze](/analyze)
