Two Factor Authentication for Magento 2

Two Factor Authentication for Magento 2 (Adobe Commerce) adds extra security features to the account. It provides two-factor authentication for the website. This is verified in two cases i.e creation of a new account and login into the account of existing customers. It is one of the most reliable processes for the security of account purposes.

Go through the brief overview of the module –

• At the time of registration, Auth Code will be sent to the mobile number entered. However, it will be verified after the account will be created.
• Admin can enable/disable the TwoFactorAuth module from the admin configuration.
• Admin can enable/disable TwoFactorAuth verification of the customers at the time of registration.
• Customers have to verify to access the account.
• The verification code expiration time period can be changed by the admin.

#1 Download Module

Firstly, you need to log in to Webkul Store, go to My Account>My Purchased Products section, verify and then download and extract the contents of this zip folder on the system.

#2 Upload Folder

Once the module zip is extracted, follow path src>app and then copy the app folder into the Magento 2 root directory on the server as shown below:

#3 Run Commands

After uploading the module folder, you need to run the following commands in the Magento 2 root directory:

composer require twilio/sdk

php bin/magento setup:upgrade

php bin/magento setup:di:compile

php bin/magento setup:static-content:deploy

php bin/magento indexer:reindex

php bin/magento cache:flush

After running the commands, you have to flush the cache from the Magento admin panel. By navigating through System > Cache management as shown below.

Install Extension from Magento Marketplace

If you have purchased this extension from the Magento Marketplace then please follow the below process or visit this link.

#1 Get Access Keys

You need to get access keys, navigate to My Profile in Magento Marketplace, and then choose Access Keys in the My Products section.

Go to Magento 2 and then you need to copy both the Access Keys – Public Key and Private Key. These access keys will be needed in the next steps for authentication.

If access keys are not created earlier, click Create A New Access Key, enter any name and click OK.

#2 Update composer.json File

To know the component name and version number, go to your Magento Marketplace account section, My Profile>My Purchases, then find this extension to view the details. Please note – Below is an example image, every extension will have its unique component name and version.

After that, navigate to your Magento project directory and update your composer.json file in the following format.

composer require <component-name>:<version>

For example, to install version 5.0.0 of this extension you need to run the following command:

composer require webkul/2fa:5.0.0

#3 Enter Access Keys

Now you will need to enter the Access Keys that you obtained as explained in the first step #1 Get Access Keys. Wait for Composer to finish updating your project dependencies and make sure there aren’t any errors.

#4 Run Commands

You need to run the following commands:

php bin/magento setup:upgrade

php bin/magento setup:di:compile

php bin/magento setup:static-content:deploy

php bin/magento indexer:reindex

php bin/magento cache:flush

For multilingual support, the admin will navigate through Store > Configuration > General > Locale Options. Now select the locale as English (the language into which the admin wants to translate his store content).

Once the module of Two Factor Authentication for Magento 2 (Adobe Commerce) is installed completely. The admin will now manage the feature from the backend by navigating to Stores > Configuration > TwoFactorAuth.

The admin will set the Enable to Yes to make the module active for the store. Else, the admin will set  No to disable the feature for the store.

Admin Enable /Disable 

In configuration settings, the admin can enable and disable the twofactAuth.

• Enable Module on Frontend:- Admin can enable and disable the module by YES/No
• Need Auth Validation On Customer Registration:- To register new customer validation needed or not YES/No.
• Auth Code Expiry:- OTP duration is between 60 to 300 sec.

Twilio Auth

“Twilio” is a communications platform for sending and receiving text messages using its web service APIs.

The admin can signup for the Twilio services and register to the Twilio. To register, the admin can visit Twilio then click on the signup button. 

Now, from the Twilio account, the admin can access the information required in the admin dashboard. 

New Customer Account Registration and verification

At time new account creation by customer. OTP will be sent to the customer’s mobile number. Now customer to go through the two-step verification. As per the given below image.

Enter the OTP  sent on the registered mobile number. After the verification Account is verified successfully of a new customer. It appears like the given below image.

Existing Customer

TwoFactAuth is applicable for the existing customer. Any time an existing customer does the login. He receives the OTP. After entering the OTP they can use their account after verification.

Thus, the customer receives the OTP (SMS) on the mobile, as shown in the image below.

That’s all for the Two Factor Authentication for Magento 2 . Still, if you face any issues feel free to add a ticket. Let us know your views to make the module better https://webkul.uvdesk.com/

Explore the Adobe Commerce Cloud development services by Webkul. You may also browse our quality Magento 2 extensions.