Multi-factor authentication
Since Joomla 4.2, the CMS offers out-of-the-box support for multi-factor authentication. This new feature replaces the two-factor authentication method that has been included in Joomla for years since version 3.x.
Multi-factor authentication is a way to strengthen the security of your website, allowing an additional level of verification while users log in to the website.
Multi-factor authentication occurs in two separate steps: the users insert their login credentials (username and password) and then they are requested to execute the additional validation via one of the supported methods.
Natively, Joomla offers multiple authentication validation methods:
- Verification code
- YubiKey
- Web authentication
- Email verification
- Fixed code
For each login validation method, there is a specific plugin that can be enabled or disabled. Enabling the corresponding plugin means that the validation method can be used in multi-factor...