Add a two-factor TOTP authentication to the MODX manager. Secure the front end login with a pre-hook for the "Login" extra. Generate a QR Code for saving the authenticator secret with a snippet in the frontend.

MODX Package Management

Install via package manager. When the system setting enable_2fa is enabled, a manager user has to verify the TOTP secret. Otherwise, the authenticator secret verify window is displayed with each manager load. When it is verified, the manager user has to use the TOTP key to login into the manager. The TOTP authentication can be disabled on manager user base.

The project is licensed under the GPLv2 license.

Translations of the package can be made for the Default Lexicon, the Email Lexicon, the Properties Lexicon, the Permissions Lexicon and the System Setting Lexicon