Logo

Multi-factor Authentication/ Two-Factor Authentication adds an extra layer of protection to your Drupal website. Our MFA module supports various authentication methods, including but not limited to OTP via email, SMS, or TOTP-based authenticator apps. MFA module is based on the principles of authentication:

  • Something you have - Proving your identity based on a device or token that you possess.
  • Something you know - Authenticating yourself by providing secret information that only you would know.
  • Something you are - Biometric Security *Coming in 2025

Drupal MFA module (Multi-Factor Authentication) drastically reduces the risk of data breaches and identity theft. Whether you're a website owner, developer, or IT administrator, the miniOrange 2FA module caters to all by offering customizable security policies and advanced options for role-based 2FA enforcement.

Protect sensitive data, meet compliance requirements, and enhance trust among your users—all with a reliable, easy-to-manage solution that scales with your growing website needs.

Know more Setup Guides Our unique case-studies

Enterprise Level Features

  • Over 15+ Powerful Authentication Methods: OTP, TOTP, KBA, Hardware Tokens and more
  • Role-Based Authentication: Mandate 2FA for specific Roles.
  • Domain-Specific Rules: Enforce 2FA for requests originating from outside your domain.
  • IP Whitelisting Made Easy: Skip Drupal two-factor authentication/ multi-factor authentication for trusted locations like your office.
  • Login Your Way: Flexible & Future-Ready:
    • Standard Logins:
      • Username + Password + Drupal 2FA
      • Email + Password + 2FA
      • Phone Number + Password + 2FA
    • Next-Gen Passwordless Logins:
      • Username + 2FA (Learn More)
      • Email + 2FA
      • Phone Number + 2FA
  • Custom Branding: Add your logo, company name, or personalized touch to every SMS and email to build trust while staying top-of-mind.
  • Remember My Device: Say goodbye to repetitive verifications. Enable this option, so users can skip MFA when returning from their trusted device.
  • Backup Options: Don’t leave users stranded. Use security questions as a backup, ensuring they’re never locked out of their accounts.
  • Support for Headless Drupal: Running a headless or decoupled Drupal setup? No problem! Our MFA solution integrates smoothly, whether it’s for a mobile app, a progressive web app (PWA), or a single-page application.

Supported TFA methods and their setup guides:

TOTP Based TFA methods

Google Authenticator | Microsoft Authenticator | Okta Verify Authenticator

Duo Authenticator | LastPass Authenticator | Authy Authenticator

2FAS Authenticator | RSA SecureID Authenticator | miniOrange Authenticator

Oracle Authenticator | Salesforce Authenticator | Zoho OneAuth Authenticator

OTP Based TFA methods

OTP Over SMS | OTP Over Email | OTP Over SMS and Email

OTP Over Phone call | OTP Over WhatsApp | OTP Over Telegram

Other TFA methods

Email Verification | Hardware Token | Security Questions (KBA)

Push Notification | QR Code Authentication | Decoupled/Headless 2FA

Free Trial

To try out the premium features for 7-day, drop an email at drupalsupport@xecurify.com.

If you need email or phone verification for user registration, please check out our services: Email Verification, SMS Verification, and OTP Verification.

Explore the complete list of modules and discover the perfect fit for your needs!

Round-the-clock assistance

Need help setting up Drupal 2FA? Our dedicated support team is available around the clock to assist you.
Email us or call us at +1 978-658-9387 (US) or +91 971-784-5846 (India) for fast, reliable support. We're here to make your Drupal 2FA setup smooth and hassle-free!

 Get In Touch With Us Join Our Slack Channel


Short name
miniorange_2fa
Supporting organizations