scheb/2fa
Two-factor authentication for Symfony applications (please use scheb/2fa-bundle to install)
Maintainers
Requires
- php: ~8.4.0 || ~8.5.0
- ext-json: *
- lcobucci/clock: ^3.0
- lcobucci/jwt: ^5.0
- spomky-labs/otphp: ^11.4
- symfony/config: ^7.4 || ^8.0
- symfony/dependency-injection: ^7.4 || ^8.0
- symfony/event-dispatcher: ^7.4 || ^8.0
- symfony/framework-bundle: ^7.4 || ^8.0
- symfony/http-foundation: ^7.4 || ^8.0
- symfony/http-kernel: ^7.4 || ^8.0
- symfony/property-access: ^7.4 || ^8.0
- symfony/security-bundle: ^7.4 || ^8.0
- symfony/service-contracts: ^2.5|^3
- symfony/twig-bundle: ^7.4 || ^8.0
Requires (Dev)
- doctrine/coding-standard: ^14.0
- doctrine/persistence: ^3.0 || ^4.0
- egulias/email-validator: ^4.0
- phpunit/phpunit: ^12
- psr/container: >=1.1
- squizlabs/php_codesniffer: ^4.0
- symfony/mailer: ^7.4 || ^8.0
- symfony/validator: ^7.4 || ^8.0
- symfony/yaml: ^7.4 || ^8.0
- vimeo/psalm: ^6.0
Suggests
None
Provides
None
Conflicts
Replaces
- scheb/2fa-backup-code: ^8.0
- scheb/2fa-bundle: ^8.0
- scheb/2fa-email: ^8.0
- scheb/2fa-google-authenticator: ^8.0
- scheb/2fa-totp: ^8.0
- scheb/2fa-trusted-device: ^8.0
MIT 43088a18c195b8d56220e08d0c58bc739ed20c4f
- Christian Scheb <me.woop@christianscheb.de>
This package is auto-updated.
Last update: 2026-06-12 18:41:45 UTC
README
This bundle provides two-factor authentication for your Symfony application.
đ Build Status
đ Code Coverage
đ Latest Stable Version
đ Monthly Downloads
đ Total Downloads
đ License
đ SchebTwoFactorBundle Logo
âšī¸ The repository contains bundle versions âĨ 5, which are compatible with Symfony 4.4 or later. The older (unsupported) versions are located in the scheb/two-factor-bundle repository.
The bundle is split into sub-packages, so you can choose the exact feature set you need and keep installed dependencies to a minimum.
Core features are provided by scheb/2fa-bundle:
- Interface for custom two-factor authentication methods
- Trusted IPs
- Multi-factor authentication (more than 2 steps)
- CSRF protection
- Brute-force protection
- Authentication code reuse protection
- Whitelisted routes (accessible during two-factor authentication)
- Fully customizable conditions when to perform two-factor authentication
Additional features:
- Trusted devices (once passed, no more two-factor authentication on that device) (
scheb/2fa-trusted-device) - Single-use backup codes for when you don't have access to the second factor device (
scheb/2fa-backup-code) - QR codes to scan with your mobile device
Two-factor authentication methods:
- TOTP authentication (
scheb/2fa-totp) - Google Authenticator (
scheb/2fa-google-authenticator) - Authentication code via email (
scheb/2fa-email)
Installation
Follow the installation instructions.
Documentation
Detailed documentation of all features can be found on the Symfony Bundles Documentation website.
Demo
This repository contains a small test application that can be quickly set-up locally to test two-factor authentication
in a real Symfony environment. Check out the readme file in the app folder for more details.
For a live demo of this application, visit https://2fa.scheb.de.
Version Guidance
| Version | Status | Symfony Version |
|---|---|---|
| 1.x | EOL | >= 2.1, < 2.7 |
| 2.x | EOL | ^2.6, ^3.0, ^4.0 |
| 3.x | EOL | 3.4, ^4.0, ^5.0 |
| 4.x | EOL | 3.4, ^4.0, ^5.0 |
| 5.x | EOL | 4.4, ^5.0 |
| 6.x | EOL | 5.4, ^6.0 |
| 7.x | Bug & security fixes | 6.4, ^7.0 |
| 8.x | New features + Bug fixes | 7.4, ^8.0 |
License
This software is available under the MIT license.
Security
For information about the security policy and know security issues, see SECURITY.md.
Contributing
Want to contribute to this project? See CONTRIBUTING.md.
Support Me
I'm developing this library since 2014. I love to hear from people using it, giving me the motivation to keep working on my open source projects.
If you want to let me know you're finding it useful, please consider giving it a star â on GitHub.
If you love my work and want to say thank you, you can help me out for a beer đģī¸ via PayPal.