Two-Factor Authentication

Two-Factor Authentication lets you ensure only trusted networks have access to your account, by using your smartphone to validate login attempts from new IP addresses.

Average customer rating: Product downloaded over 1,240 times.


Product Download

Recommended AddOns



Two-Factor Authentication lets you ensure only trusted networks have access to your account, by using your smartphone to validate login attempts from new IP addresses.


Why use Two-Factor Authentication?

The most common form of "hacking" a forum today is someone guessing or in some other way gaining access to the password to an administrator account. Even with password protection on your AdminCP and ModCP directory, irreparable harm can be done with an administrator account without needing to log in to any of these locations. Enabling two-factor authentication ensures that only trusted networks can access the accounts of your staff as well as your members.

Our two-factor authentication mod uses Google Authenticator to pair a member's forum account with their smartphone app. A "Recovery Key" shown on-screen during setup ensures that if a member should ever lose their phone, they can regain access to their account.
Feature List

UserCP Integration
  • Adds a "Two-Factor Authentication" link in the UserCP under "My Account"
  • Displays a page with a button to activate or deactivate the authenticator


Network Verification
  • Logs the IP Address of members who have activated the authenticator
  • Asks for verification code for untrusted networks
  • Blocks forum, AdminCP and ModCP access attempts from untrusted networks


Google Authenticator
  • Uses Google's authenticator to handle the QR barcode and code generation
  • Works on Android and iOS
  • Recovery Key ensures that if you lose your phone, you can deactivate the authenticator


IP Whitelist
  • Adds a new config.php parameter, $config['TwoFactor']['ipwhitelist']
  • Whitelists IPs for all accounts for as long as the IP is in config.php
  • Follows the same rules as the AdminCP "IP Ban" interface for powerful IP management


General / Other
  • Display version number
  • Enter your branding free key if you purchased one.
  • Disable the Hivelocity link
  • Enter your Affiliate ID
This mod displays a copyright notification in the footer of all pages which includes:
  • 1 Link to DragonByte Technologies homepage
  • 1 Link to Product Description page of this modification
  • 1 Link to Hivelocity Hosting (Can be disabled via vBulletin Options)
  • v1.0.3 - 9th February 2016, 01:40
    Changed Features:
    • Improved the security of the Google Authenticator integration class with fixes from GitHub
    • 2FA no longer runs when attempting to authorise your IP address with vBSecurity, preventing scenarios where users have to click the vBSecurity authorisation link twice
  • v1.0.2pl2 - 1st January 1970, 01:00
    Bug Fixes:
    • This mod will no longer interfere with the "Password Expiry" feature
    • This mod will no longer interfere with the "Force Profile Fields" feature
  • 1.0.2 Patch Level 1 - 7th July 2014, 23:59
    Two-Factor Authentication v1.0.2 Patch Level 1

    Bug Fixes:
    • This mod will no longer interfere with the "Password Expiry" feature
    • This mod will no longer interfere with the "Force Profile Fields" feature
  • v1.0.2 - 28th April 2014, 19:51
    New Features Added:

    IP Whitelist
    • Adds a new config.php parameter, $config['TwoFactor']['ipwhitelist']
    • Whitelists IPs for all accounts for as long as the IP is in config.php
    • Follows the same rules as the AdminCP "IP Ban" interface for powerful IP management
  • v1.0.1 - 31st March 2014, 19:04
    Changes to Existing Features:
    • Using the "vSA Login To User Account" mod will no longer trigger the authentication requirement

At a glance

Supports: vBulletin 4.x.x

Version: v1.0.3
Release date: 9th February 2016

Have an issue and need some help?