Download the PHP package stutzmedien/2fa without Composer
On this page you can find all versions of the php package stutzmedien/2fa. It is possible to download/install these versions without Composer. Possible dependencies are resolved automatically.
Table of contents
Download stutzmedien/2fa
More information about stutzmedien/2fa
Files in stutzmedien/2fa
Download stutzmedien/2fa
More information about stutzmedien/2fa
Files in stutzmedien/2fa
Vendor stutzmedien
Package 2fa
Short Description Authenticator compatible 2FA for WordPress
License GPL-2.0-or-later
Package 2fa
Short Description Authenticator compatible 2FA for WordPress
License GPL-2.0-or-later
Please rate this library. Is it a good library?
Informations about the package 2fa
Andromeda Two‑Factor Authentication (2FA)
A lightweight WordPress plugin that adds Time‑based One‑Time Password (TOTP) two‑factor authentication to user accounts. Compatible with common authenticator apps like Google Authenticator, Authy, and 1Password.
✨ Features
- TOTP Authentication – Secure time-based one-time passwords
- Recovery Codes – One-time fallback codes with regenerate and download options
- User Control – Per-user enable/disable functionality
- Quick Setup – QR code provisioning for easy configuration
- Login Flow Integration – 2FA challenge injected into wp-login
- Tested – Comprehensive PHPUnit test suite
📋 Requirements
- PHP: 8.4 or higher
- WordPress: 6.8 or higher
- Composer: For dependency management
🚀 Quick Start
Installation
Activation
- Navigate to wp-admin → Plugins
- Find "Andromeda Two‑Factor Authentication"
- Click Activate
User Setup
- Go to Users → Your Profile
- Find the "Two‑Factor Authentication" section
- Scan the QR code with your authenticator app
- Enter the 6-digit code to verify setup
- Check "Enable 2FA" and save your profile
- Store your recovery codes in a safe place
- Use Generate Recovery Codes when you run out
🛠️ Development
Project Structure
Available Scripts
| Command | Description |
|---|---|
composer test |
Run test suite |
composer test:coverage |
Run tests with HTML coverage report |
composer lint |
Check code style |
composer lint:fix |
Auto-fix code style issues |
Code Coverage
- Requires Xdebug installed and enabled.
- The coverage script sets
XDEBUG_MODE=coverageautomatically. - After
composer test:coverage, open the HTML report in thecoverage/directory.
⚙️ Technical Details
Login Flow
- A 2FA challenge is triggered after primary credential validation for users with 2FA enabled.
- The login form accepts either a 6-digit TOTP or a recovery code.
- Challenge state is tracked via a short-lived cookie (
andromeda_2fa_token) and transient (andromeda_2fa_auth_{token}).
Data Storage
- Secret Key:
andromeda_2fa_secret(user meta) - Status:
andromeda_2fa_enabled(user meta) - Recovery Codes:
andromeda_2fa_recovery_codes(user meta, hashed) - QR Codes: Generated as data URIs (no file system writes)
- Recovery Codes Preview: transient
andromeda_2fa_plain_codes_{user_id}(shown once)
Dependencies
- Managed via
composer.json - PSR-4 autoloading for clean architecture
🔒 Security
Found a security issue? Please contact us privately at [email protected] instead of filing a public issue.
📄 License
This project is licensed under the GNU General Public License v2.0 - see the LICENSE file for details.
All versions of 2fa with dependencies
PHP Build Version
Package Version
The package stutzmedien/2fa contains the following files
Loading the files please wait ...