Back to overview

Two-Factor Authentication (2FA)

Add it on-the-fly to your HumHub by activating it in the Modules menu! ("Administration -> Modules")

PHP Codeception Tests

Two-Factor Authentication (2FA)

Increase security within your network by adding an additional authentication method besides username and password.

Available methods:

  • Email
  • Time-based one-time passwords (e.g. Google Authenticator)

Administrators can individually define which user groups are required to use an additional authentication method. For administrators themselves, a second authentication method will be enabled by default.


Individual Drivers

New driver should be extended from humhub\modules\twofa\drivers\BaseDriver in the folder drivers.

Also new created driver should be added into array humhub\modules\twofa\Module->drivers:

public $drivers = [

Default driver humhub\modules\twofa\Module->defaultDriver is used for Users from enforced Groups:

public $defaultDriver = EmailDriver::class;

1.1.0 (November 9, 2022)

  • Enh #41: Added Option to use Google Authentication as Default
  • Fix #50: Don't send a verification code when browser was remembered

1.0.7 (March 2, 2022)

  • Fix #45: Fix remember browser

1.0.6 (Februrary 2, 2022)

  • Enh #36: Update logout url to POST method
  • Enh: Added French translations
  • Enh #33: Added trusted network functionality
  • Enh #16: Added remember browser for X days
  • Fix #41: Fix error for user without email address

1.0.5 (August 10 , 2021)

  • Fix #29: Fix button "Log out" to prevent pjax
  • Fix #31: Don't require 2FA on administration action "Impersonate"

1.0.4 (15 June, 2021)

  • Fix #23: Urlencode account name in otpauth URL
  • Fix #25: Fix double rendering QR code after cancel of requesting new code

1.0.3 (May 11, 2021)

  • Fix #22: Composer dependencies for Google Auth missing in marketplace package

1.0.2 (May 10, 2021)

  • Enh #18: Generate QR code for Google authenticator by local JS script (Don't send TOTP key to Google)

1.0.1 (May 6, 2021)

  • Fix: Link in translatable string
  • Enh: Use controller config for not intercepted actions (HumHub 1.9+)
  • Fix: Don't verify code if user must change password

1.0.0 (February 9, 2021)

  • Enh: Initial release
  • Init: Default driver to send code by e-mail
  • Enh: Driver "Google Authenticator"
  • Enh: Require pin code before enabling Google Authenticator
1.1.0 (released 24 days ago)

HumHub GmbH & Co. KG


HumHub 1.11 - Latest

HumHub Cloud

Install it on-the-fly at the admin panel
in your HumHub hosting instance

HumHub Self-Hosted

Install it on-the-fly at the admin panel
in your HumHub installation