# Support for multi-factor authentication **URL:** \ **Category:** Uncategorized\ **Created:** [August 12, 2020, 12:22pm UTC](https://forum.manager.io/t/support-for-multi-factor-authentication/30008 "2020-08-12T12:22:59Z")\ **Posts on this page:** 20\ **Page:** 1
**Author:** ![spoontech](https://avatars.discourse-cdn.com/v4/letter/s/c4cdca/32.png) [@spoontech](https://forum.manager.io/u/spoontech)\ **Post date:** [August 12, 2020, 12:22pm UTC](https://forum.manager.io/t/support-for-multi-factor-authentication/30008/1 "2020-08-12T12:22:59Z")
Hi guys, Firstly, we love your product, so thanks for the awesome work. We currently hold a license for the server edition, and we’re keen to implement 2fa to secure our instance. We’ve read a few different posts discussing 2fa, but wondered if there were any plans to implement 2fa in the server edition, or to support any sort of multi-factor auth (okta or duo)? Thanks in advance, ---
**Author:** ![compuit](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.manager.io/compuit/32/66_2.png) [@compuit](https://forum.manager.io/u/compuit)\ **Post date:** [November 15, 2021, 9:49pm UTC](https://forum.manager.io/t/support-for-multi-factor-authentication/30008/2 "2021-11-15T21:49:56Z")
This has become a huge thing for us now as we are not only concerned about our own company data but we store a lot of customer sensitive stuff too. Is there a 2FA product to stand in front of the Manager Server Version login to give some additional security please? Back in Sep 2016 > [@Any plans for 2FA support on the cloud version?](https://forum.manager.io/t/any-plans-for-2fa-support-on-the-cloud-version/7117/3): > > This is not an excuse for Manager not supporting 2FA. It’s just an explanation why it has been prioritized a bit lower than other features. It’s still going to be added, most likely before end of this year. ---
**Author:** ![eko](https://avatars.discourse-cdn.com/v4/letter/e/a8b319/32.png) [@eko](https://forum.manager.io/u/eko)\ **Post date:** [November 16, 2021, 12:57am UTC](https://forum.manager.io/t/support-for-multi-factor-authentication/30008/3 "2021-11-16T00:57:36Z")
2FA is now defacto standard in online applications that store sensitive data and not really sure why @Lubos still has not implemented this. ---
**Author:** ![compuit](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.manager.io/compuit/32/66_2.png) [@compuit](https://forum.manager.io/u/compuit)\ **Post date:** [November 16, 2021, 9:44am UTC](https://forum.manager.io/t/support-for-multi-factor-authentication/30008/4 "2021-11-16T09:44:43Z")
Anyone got knowledge or recommendation for any third party tool for 2FA to patch current Manager Server version? ---
**Author:** ![spoontech](https://avatars.discourse-cdn.com/v4/letter/s/c4cdca/32.png) [@spoontech](https://forum.manager.io/u/spoontech)\ **Post date:** [November 16, 2021, 9:58am UTC](https://forum.manager.io/t/support-for-multi-factor-authentication/30008/5 "2021-11-16T09:58:25Z")
I ended up solving this 2 different ways. First, you can run a (local) freeradius instance with pam + google auth, and use this with apache2, or if you can manage your clients, you can use client cert auth as well. Neither is perfect, but having no 2fa was not an option for us. Hopefully one day 2fa can be integrated into manager. Shout out if you need a hand with config(s) etc for either of the above, but I’m sure your google foo will cover it 🙂 ---
**Author:** ![compuit](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.manager.io/compuit/32/66_2.png) [@compuit](https://forum.manager.io/u/compuit)\ **Post date:** [November 16, 2021, 10:04am UTC](https://forum.manager.io/t/support-for-multi-factor-authentication/30008/6 "2021-11-16T10:04:05Z")
Cheers I may call out thank you. Just looking at MiniOrange which talks about a radius deployment [Two-Factor Authentcation (2FA) for Apache Web Server](https://www.miniorange.com/two-factor-authentication-(2fa)-for-apache-web-server) ---
**Author:** ![spoontech](https://avatars.discourse-cdn.com/v4/letter/s/c4cdca/32.png) [@spoontech](https://forum.manager.io/u/spoontech)\ **Post date:** [November 16, 2021, 10:05am UTC](https://forum.manager.io/t/support-for-multi-factor-authentication/30008/7 "2021-11-16T10:05:30Z")
Yup, same technique, but would highly recommend freeradius. ---
**Author:** ![Ahmad\_Khoiron](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.manager.io/ahmad_khoiron/32/44324_2.png) [@Ahmad\_Khoiron](https://forum.manager.io/u/Ahmad_Khoiron)\ **Post date:** [November 9, 2022, 6:28am UTC](https://forum.manager.io/t/support-for-multi-factor-authentication/30008/8 "2022-11-09T06:28:15Z")
Is good and must feature. Hope @lubos will look at this topic. Thanks ---
**Author:** ![shootify](https://avatars.discourse-cdn.com/v4/letter/s/5e9695/32.png) [@shootify](https://forum.manager.io/u/shootify)\ **Post date:** [June 3, 2023, 6:52am UTC](https://forum.manager.io/t/support-for-multi-factor-authentication/30008/9 "2023-06-03T06:52:21Z")
yes please we need this ASAP. thanks ---
**Author:** ![lubos](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.manager.io/lubos/32/62798_2.png) [@lubos](https://forum.manager.io/u/lubos)\ **Post date:** [February 15, 2024, 5:27am UTC](https://forum.manager.io/t/support-for-multi-factor-authentication/30008/10 "2024-02-15T05:27:25Z")
Added to the latest version (24.2.15) This can be enabled on per-user basis. Under `Users` tab, when clicking on any user (except for `administrator`), you will see new checkbox. ![image](https://us1.discourse-cdn.com/flex019/uploads/manager1/original/3X/3/6/3638187aaa24f9c314851f0f6456126f242ff9fb.png) When this checkbox is checked and user with this option enabled is trying to log in, they will see the following notice the first time they try to log in: ![image](https://us1.discourse-cdn.com/flex019/uploads/manager1/original/3X/e/a/ea54386f7ea2b69fce610c29ff25db2d18edf094.png) They can use Google Authenticator, Authy or some other similar app to set up multi-factor authentication. The next time they try to log in, they will see: ![image](https://us1.discourse-cdn.com/flex019/uploads/manager1/original/3X/6/9/698357591101c607c77bc81f83a8ce1d1f0de795.png) ---
**Author:** ![eko](https://avatars.discourse-cdn.com/v4/letter/e/a8b319/32.png) [@eko](https://forum.manager.io/u/eko)\ **Post date:** [February 15, 2024, 5:38am UTC](https://forum.manager.io/t/support-for-multi-factor-authentication/30008/11 "2024-02-15T05:38:27Z")
This is a step forward but the most vulnerable account is the Administrator account and a solution is needed more urgently than users. ---
**Author:** ![spoontech](https://avatars.discourse-cdn.com/v4/letter/s/c4cdca/32.png) [@spoontech](https://forum.manager.io/u/spoontech)\ **Post date:** [February 15, 2024, 7:04am UTC](https://forum.manager.io/t/support-for-multi-factor-authentication/30008/12 "2024-02-15T07:04:31Z")
That’s fantastic, thanks @lubos As @eko mentioned, adding to the Administrator account is also important, but its a massive improvement. Thank you for your hard work. ---
**Author:** ![evans](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.manager.io/evans/32/44202_2.png) [@evans](https://forum.manager.io/u/evans)\ **Post date:** [February 15, 2024, 11:34am UTC](https://forum.manager.io/t/support-for-multi-factor-authentication/30008/13 "2024-02-15T11:34:07Z")
Great improvement @lubos ! Another milestone added ! I totally agree with @eko to have this feature also available for the Administrator account. (just to note: I just checked that - Cloud ver. 24.2.15.1305- and it is also available for users with role “Administrator” except only for the main account of Administrator) ---
**Author:** ![Shan](https://avatars.discourse-cdn.com/v4/letter/s/7ab992/32.png) [@Shan](https://forum.manager.io/u/Shan)\ **Post date:** [February 16, 2024, 3:30am UTC](https://forum.manager.io/t/support-for-multi-factor-authentication/30008/14 "2024-02-16T03:30:00Z")
Thank you @lubos for this great improvement. My humble suggestion, As we already have this 2FA feature, I think it may get it’s full benefit by implementing the related feature already in ideas mentioned below; > [@Auto session logout](https://forum.manager.io/t/auto-session-logout/46265): > > Continuing the discussion from [MFA for users](https://forum.manager.io/t/mfa-for-users/46261/3): Auto session logout has been requested numerous times, and since 2FA is already an idea, it only seems logical to place this one in idea as well since its easy to implement. Because normally the staffs, they simply try to close the browser in the evening and open in in the morning without need for log in. In between anyone access the computer will get the chance to do anything in the account under the user’s name. ---
**Author:** ![compuit](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.manager.io/compuit/32/66_2.png) [@compuit](https://forum.manager.io/u/compuit)\ **Post date:** [February 19, 2024, 12:30pm UTC](https://forum.manager.io/t/support-for-multi-factor-authentication/30008/15 "2024-02-19T12:30:22Z")
Updated Server version, enabled users for the 2FA and it worked seamlessly - a Big thank you. ---
**Author:** ![raj\_nann](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.manager.io/raj_nann/32/18580_2.png) [@raj\_nann](https://forum.manager.io/u/raj_nann)\ **Post date:** [February 19, 2024, 10:19pm UTC](https://forum.manager.io/t/support-for-multi-factor-authentication/30008/16 "2024-02-19T22:19:39Z")
i installed google authenticator , scanned the barcode, i received a code then i deleted authenticator app on purpose , now i cant see the code how should i receive the code again? should i ask admin again to do any steps? ---
**Author:** ![compuit](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.manager.io/compuit/32/66_2.png) [@compuit](https://forum.manager.io/u/compuit)\ **Post date:** [February 20, 2024, 10:08am UTC](https://forum.manager.io/t/support-for-multi-factor-authentication/30008/17 "2024-02-20T10:08:56Z")
Yes, assuming you are using Cloud or Server version of Manager: - Just get you Manager **Administrator** to login and remove the “ **Enforce multi-factor authentication** ” tick box on your user account - You then log in as normal to Manager to confirm access without MFA enabled and OK - Then reinstall the Google Authenticator on your Device. - Request Manager **Administrator** to tick and re enable “ **Enforce multi-factor authentication** ” tick box on your user name ![image](https://us1.discourse-cdn.com/flex019/uploads/manager1/original/3X/f/6/f65887076fbcc3c2e5ff565f7715a5581c8b572d.png) - Log in to Manager with your user name and Password - Use your device to add account to Authenticator by scanning the QR Code presented to you on first Manager login with Multi-Factor enforced ---
**Author:** ![raj\_nann](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.manager.io/raj_nann/32/18580_2.png) [@raj\_nann](https://forum.manager.io/u/raj_nann)\ **Post date:** [February 21, 2024, 6:37am UTC](https://forum.manager.io/t/support-for-multi-factor-authentication/30008/18 "2024-02-21T06:37:55Z")
got it thank you ---
**Author:** ![compuit](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.manager.io/compuit/32/66_2.png) [@compuit](https://forum.manager.io/u/compuit)\ **Post date:** [February 21, 2024, 9:26am UTC](https://forum.manager.io/t/support-for-multi-factor-authentication/30008/19 "2024-02-21T09:26:45Z")
> [@eko](#): > > This is a step forward but the most vulnerable account is the Administrator account and a solution is needed more urgently than users. You gentlemen may consider this with regard to the production system’s “Administrator” account. - Set a very, very complex password for the “Administrator” account. - Then create a new account with “Administrator” **Role** privileges. - Name the new Admin account something else … Say “Manager”. - Now enable MFA for the new Admin account, in this example “Manager” ![image](https://us1.discourse-cdn.com/flex019/uploads/manager1/original/3X/8/f/8fe1ae67a8ca182b83f1f09550389a1d7488e332.png) **Notes** : - The Original Administrator account will for all intensive purposes no longer be used but will still be usable should it be resurrected with the long and complex password. - We have tested and introduced this to instances where the Ubuntu Server version of Manager is used. - Your new System Manager / Admin account can do all Manager functions you may need to achieve with MFA. ---
**Author:** ![eko](https://avatars.discourse-cdn.com/v4/letter/e/a8b319/32.png) [@eko](https://forum.manager.io/u/eko)\ **Post date:** [February 21, 2024, 10:46am UTC](https://forum.manager.io/t/support-for-multi-factor-authentication/30008/20 "2024-02-21T10:46:12Z")
> [@compuit](#): > > long and complex password This definitely would delay a brute force attack but it is far less secure than you think, even 2FA is no guarantee but at least survives brute force attacks. Any protection based on whatever complex password can be broken much easier than with more advanced protection features. Also Manager SQLite database would benefit from using an encryption extension. SSL is fine for online transmission purposes but the typical SQLite database is unencrypted and if one manages to gain access to it then there is a problem. [Next page](https://forum.manager.io/t/support-for-multi-factor-authentication/30008.md?page=2)