What is Two-Factor Authentication?
Two-factor authentication adds an additional layer of security by adding a second step to your login. It takes something you know (ie. your password) and adds a second factor, typically something you have (such as your phone.) Since both are required to log in, even if an attacker has your password they can't access your account.![](\"images/twofahow.png\")
Why do you need it?
Passwords are increasingly easy to compromise. They can often be guessed or leaked, they usually don't change very often, and despite advice otherwise, many of us have favorite passwords that we use for more than one thing. So Two-factor authentication gives you additional security because your password alone no longer allows access to your account.
How it works?
There are many different options available, and in WHMCS we support more than one so you have the choice. But one of the most common and simplest to use is time based one-time passwords. With these, in addition to your regular username & password, you also have to enter a 6 digit code that changes every 30 seconds. Only your token device (typically a mobile smartphone) will know your secret key, and be able to generate valid one time passwords for your account. And so your account is far safer.
Force Settings
"; echo $frm->checkbox('forceclient', "Force Clients to enable Two Factor Authentication on Next Login", $twofasettings['forceclient']) . "
"; echo $frm->checkbox('forceadmin', "Force Administrator Users to enable Two Factor Authentication on Next Login", $twofasettings['forceadmin']) . "
"; echo $frm->submit($aInt->lang('global', 'savechanges')); echo "
Two-factor authentication adds an additional layer of security by adding a second step to your login. It takes something you know (ie. your password) and adds a second factor, typically something you have (such as your phone.) Since both are required to log in, even if an attacker has your password they can't access your account.
Passwords are increasingly easy to compromise. They can often be guessed or leaked, they usually don't change very often, and despite advice otherwise, many of us have favorite passwords that we use for more than one thing. So Two-factor authentication gives you additional security because your password alone no longer allows access to your account.
How it works?
There are many different options available, and in WHMCS we support more than one so you have the choice. But one of the most common and simplest to use is time based one-time passwords. With these, in addition to your regular username & password, you also have to enter a 6 digit code that changes every 30 seconds. Only your token device (typically a mobile smartphone) will know your secret key, and be able to generate valid one time passwords for your account. And so your account is far safer.
Force Settings
"; echo $frm->checkbox('forceclient', "Force Clients to enable Two Factor Authentication on Next Login", $twofasettings['forceclient']) . "
"; echo $frm->checkbox('forceadmin', "Force Administrator Users to enable Two Factor Authentication on Next Login", $twofasettings['forceadmin']) . "
"; echo $frm->submit($aInt->lang('global', 'savechanges')); echo "
";
if($moduleconfigdata['clientenabled'] || $moduleconfigdata['adminenabled']) {
echo "";
$showstyle = '';
} else {
if(array_key_exists('Licensed', $configarray)) {
if($configarray['Licensed']['Value']) {
echo "";
} else {
echo "";
}
} else {
echo "";
}
$showstyle = "display:none;";
}
if(file_exists(ROOTDIR . '/modules/security/' . $module . "/logo.gif")) {
echo "![](\"../modules/security/")
";
} else {
if(file_exists(ROOTDIR . '/modules/security/' . $module . "/logo.jpg")) {
echo "";
} else {
if(file_exists(ROOTDIR . '/modules/security/' . $module . "/logo.png")) {
echo "";
} else {
echo "
";
$i++;
}
echo "" . (isset($configarray['FriendlyName']['Value']) ? $configarray['FriendlyName']['Value'] : ucfirst($module)) . "
"; } } } if($configarray['Description']['Value']) { echo "" . $configarray['Description']['Value'] . "
"; } echo "";
$tbl = new WHMCS_Table();
$tbl->add("Enable for Clients", $frm->checkbox("mod[" . $module . "][clientenabled]", "Tick to Enable", $moduleconfigdata['clientenabled'], '1', 'enable' . $module), 1);
$tbl->add("Enable for Staff", $frm->checkbox("mod[" . $module . "][adminenabled]", "Tick to Enable", $moduleconfigdata['adminenabled'], '1', 'enable' . $module), 1);
foreach($configarray as $key => $values) {
if($values['Type'] != 'System') {
if(!isset($values['FriendlyName'])) {
$values['FriendlyName'] = $key;
}
$values['Name'] = "mod[" . $module . "][" . $key . "]";
$values['Value'] = htmlspecialchars($moduleconfigdata[$key]);
$tbl->add($values['FriendlyName'], moduleConfigFieldOutput($values), 1);
}
}
echo $tbl->output();
echo "
" . $frm->submit($aInt->lang('global', 'savechanges')) . "
"; echo "