PHP download

Download the PHP package ndtan/php-2fa without Composer

On this page you can find all versions of the php package ndtan/php-2fa. It is possible to download/install these versions without Composer. Possible dependencies are resolved automatically.

Table of contents
Download ndtan/php-2fa
More information about ndtan/php-2fa
Files in ndtan/php-2fa

Vendor ndtan
Package php-2fa
Short Description NDT 2FA — TOTP (RFC 6238) for PHP with backup codes, otpauth URIs, and QR generation (SVG). Laravel & Symfony integrations included.
License MIT

Keywords symfony php laravel totp rfc6238 qr 2fa backup codes ndtan otpauth

FAQ

After the download, you have to make one include require_once('vendor/autoload.php');. After that you have to import the classes with use statements.

Example:

If you use only one package a project is not needed. But if you use more then one package, without a project it is not possible to import the classes with use statements.

In general, it is recommended to use always a project to download your libraries. In an application normally there is more than one library needed.

Some PHP packages are not free to download and because of that hosted in private repositories. In this case some credentials are needed to access such packages. Please use the auth.json textarea to insert credentials, if a package is coming from a private repository. You can look here for more information.

Some hosting areas are not accessible by a terminal or SSH. Then it is not possible to use Composer.
To use Composer is sometimes complicated. Especially for beginners.
Composer needs much resources. Sometimes they are not available on a simple webspace.
If you are using private repositories you don't need to share your credentials. You can set up everything on our site and then you provide a simple download link to your team member.
Simplify your Composer build process. Use our own command line tool to download the vendor folder as binary. This makes your build process faster and you don't need to expose your credentials for private repositories.

Please rate this library. Is it a good library?

Example code of ndtan/php-2fa

Informations about the package php-2fa

NDT 2FA (PHP)

TOTP (RFC 6238) for PHP with backup codes, otpauth URIs, and QR generation (SVG).
Ready for plain PHP, Laravel, and Symfony.

Features
Installation
Quick Start (Plain PHP)
Backup Codes
QR Codes
Framework Integrations
- Laravel
- Symfony
Secure Verification (Rate Limit + Replay Protection)
API Reference
Security Notes
Testing
License

Features

✅ TOTP (RFC 6238) — SHA1 / SHA256 / SHA512; configurable digits / period / window
✅ Base32 secrets — generate & decode for authenticator apps
✅ otpauth URIs — compatible with Google Authenticator, Authy, etc.
✅ Backup codes — plaintext generation + secure password_hash/password_verify
✅ QR generator (SVG Data URI) — via endroid/qr-code
✅ Security add-ons — Attempt limiter, replay protection, unified Verifier
✅ Frameworks — Laravel ServiceProvider (auto-discovery) & Symfony console command
✅ Zero-heavy deps — Only endroid/qr-code for QR (core TOTP is dependency-free)

Installation

PHP 8.1+ is required.

Quick Start (Plain PHP)

Tip: keep your server clock synchronized (NTP).

Backup Codes

QR Codes

The package includes an SVG QR provider (EndroidQrProvider) that returns a Data URI string you can embed directly in HTML <img> tags.

Framework Integrations

Laravel

Auto-discovered provider: ndtan\TwoFA\Laravel\NdtTwoFaServiceProvider
Container bindings:
- ndt.twofa.totp → TOTP utilities
- ndt.twofa.qr → QR provider (SVG)

Example (Controller):

Route middleware (optional):

Symfony

Console command:

Prints the secret, otpauth URI, and QR (data URI).

Secure Verification (Rate Limit + Replay Protection)

Use the built-in AttemptLimiter, UsedCodeStore, and Verifier to harden your flow.

Distributed cache (Redis/Memcached) via PSR‑16:

See docs/RATE_LIMITING.md and docs/SECURITY.md for details.

API Reference

`Totp`

generateSecret(int $bytes = 20): string
hotp(string $secretBase32, int $counter, int $digits = 6, string $algo = 'sha1'): string
totp(string $secretBase32, int $period = 30, int $digits = 6, string $algo = 'sha1', ?int $timestamp = null): string
verify(string $secretBase32, string $code, int $period = 30, int $digits = 6, string $algo = 'sha1', int $window = 1, ?int $timestamp = null): array{valid:bool,delta:?int}
buildOtpAuthUri(string $accountLabel, string $issuer, string $secretBase32, int $period = 30, int $digits = 6, string $algo = 'sha1'): string

`BackupCodes`

generate(int $count = 10, int $length = 10, ?string $alphabet = null): array
hash(string $code): string
verify(string $code, string $hash): bool

Security utilities

AttemptLimiter::__construct(RateStoreInterface $store, int $maxAttempts = 5, int $perSeconds = 300, int $lockoutSeconds = 300)
Verifier::verifyTotp(string $subjectKey, string $secretBase32, string $code): array
ArrayRateStore, Psr16RateStore, ArrayUsedCodeStore

Security Notes

Store TOTP secrets encrypted at rest.
Store backup codes as hashes only.
Allow a small drift window (window=1) and keep servers time‑synced (NTP).
Rate‑limit attempts and prevent code replay using the built‑in utilities.

Testing

License

All versions of php-2fa with dependencies

PHP Build Version

Package Version

Version v0.1.0 Release 21. Sep 2025
create-project require 0 people chose require and
0 people chose create-project.

Download

Download latest version of php-2fa from vendor ndtan

Requires php Version >=8.1
endroid/qr-code Version ^5.0

Composer command for our command line client (download client) This client runs in each environment. You don't need a specific PHP version etc. The first 20 API calls are free. Standard composer command

The package ndtan/php-2fa contains the following files

Loading the files please wait ...