Two-Step Authentication Advanced

Developed by

Version 9 Ready!

Multi-Site Licensing

To obtain a multi-site license you must negotiate a special offer with mnakalay, the developer of Two-Step Authentication Advanced.

Click below to send a private message and begin the process. You may need to sign in to before you can message this user.

Send Message
When a customer has concerns over login security, I immediately point them at Two-Step Authentication Advanced (this…


A powerful and easy-to-use two-factor authentication plugin for your login page!

Add a second layer of security to your Concrete website’s login page and help your customers and business partners keep their data on your website secure. Requires PHP 7.1 minimum

Improve user login security

Passwords alone are too weak as automated login attacks are increasing. Help users protect their accounts with 2FA.

Choose from multiple 2FA methods

Choose from several different 2FA methods (Mobile App, Email and Magic link included out of the box), and give your users the option to choose the most secure & convenient method for them.

Configurable 2FA policies

Make 2FA compulsory, block IP addresses, hide sensitive information about failure to log-in.

Easy account recovery

Occasionally your users might get locked out of their account (lost mobile phone anyone?). Offer recovery options to help them get back in.

Easy to use & simple to setup

Everything can be configured in a few minutes from the dashboard and the user block. Everything comes with hints and help texts to walk you through it.

Universal 2FA app support

You can use pretty much any 2FA app available on your mobile phone and it will work.

Make user onboarding a walk in the park

You want your users to adopt 2FA without being a hassle. Configuring & using 2FA on their account with Two-Step Authentication Advanced takes 2 minutes at most.

No dashboard access required

Users can set up 2FA via a front-end block on the website. They can also be asked to do it during registration or when logging in for existing users. They do not need to have access to the Concrete dashboard.

Responsive & mobile-friendly

Everything is responsive and mobile-friendly so setting it up and logging in is a great experience on any device.

Style & adapt your 2FA login forms

Easily override the 2FA user login form to match your login page and website's branding.

Expandable & developer-friendly

Quickly build your own second-step authenticators, for you, for your clients, or for distribution. Two-Step Authentication Advanced will do the heavy-lifting for you.

Current Version: 1.0.5
Fully Translatable: Yes
Needs External Libraries: No
Compatible 8.4.5+
License: Standard
Support Response: Replies to tickets every business day.
Support Hosted: On
Needs extra server permissions: No
Needs Internet: Yes
Marketplace Tests:
Passed Automated Tests
Passed PRB Review