2FA adds an additional security layer to Shop-Script and helps protect both the store backend and customer accounts even if a password is compromised.
After entering a regular login and password, the user confirms access with a one-time code generated by an authenticator app. The plugin implements the TOTP RFC 6238 standard and works with popular authentication apps including Google Authenticator, Microsoft Authenticator, 2FAS, Aegis, FreeOTP and other compatible applications.
Backend protection
- Two-factor authentication for Shop-Script staff and administrators.
- Login confirmation with a six-digit one-time code.
- A dedicated responsive second-factor verification screen.
- One-time recovery codes for emergency access.
- Secure recovery-code regeneration.
2FA for customers
- Customers can enable two-factor authentication for their own accounts.
- Setup is available directly from the customer account.
- Once enabled, a new login requires both the password and a one-time authentication code.
- Customers can manage 2FA, disable protection and regenerate recovery codes from their security page.
Local QR code generation
The TOTP secret is not sent to an external QR-generation service. QR codes are generated locally by the plugin.
Recovery access
When 2FA is enabled, the plugin generates a set of one-time recovery codes. All codes can be copied with a single action. For security reasons, the codes are displayed for a limited time and are subsequently stored only as secure hashes.
Security event log
The plugin records important two-factor authentication events, including successful verifications and failed confirmation attempts.
Compatible authenticator apps
- Google Authenticator
- Microsoft Authenticator
- 2FAS
- Aegis
- FreeOTP
- Yandex Key
- other RFC 6238 compatible TOTP applications
No external authentication service required
No separate subscription or third-party cloud authentication service is required. QR generation and TOTP verification are performed by the plugin.
Responsive interface
2FA setup and verification pages are optimized for desktop computers, tablets and smartphones.
Shop-Script PRO and PREMIUM compatible
The plugin only extends the authentication process and does not modify products, fractional quantities, quantity units, orders, stock management or other Shop-Script functionality.
Why use two-factor authentication?
Even a strong password can be disclosed or stolen. A second authentication factor significantly reduces the risk of unauthorized access because knowing the password alone is no longer sufficient to access a protected account.
