MyBB Google Authenticator Login
MYBB
PLUGIN
free
Google Authenticator (TOTP) two-factor authentication for MyBB logins
Google Authenticator (TOTP) two-factor authentication for MyBB logins. Protects both member and admin logins with a 6-digit code from any standard authenticator app.
Members in configured usergroups enter their password (first factor) and then a 6-digit TOTP code (second factor) before they reach the board. The QR code setup screen is shown on first login — scan it with Google Authenticator, Authy, or any TOTP app, and you're done.
What it gives you:
• Google Authenticator (TOTP) two-factor authentication for both member and admin logins
• Self-contained — bundles PHPGangsta GoogleAuthenticator library, no MyBB core dependency
• QR code setup screen — scan with any authenticator app
• Manual entry key fallback for users who can't scan
• Password encrypted into signed token (AES-256-CBC) — never exposed in the DOM
• TOTP verification with ±30 second time drift tolerance
• Configurable protected usergroups via admin setting dfotp_groups
• Default: Administrators (4) and Developers (8)
• Dark themed UI with gold accents
Members in configured usergroups enter their password (first factor) and then a 6-digit TOTP code (second factor) before they reach the board. The QR code setup screen is shown on first login — scan it with Google Authenticator, Authy, or any TOTP app, and you're done.
What it gives you:
• Google Authenticator (TOTP) two-factor authentication for both member and admin logins
• Self-contained — bundles PHPGangsta GoogleAuthenticator library, no MyBB core dependency
• QR code setup screen — scan with any authenticator app
• Manual entry key fallback for users who can't scan
• Password encrypted into signed token (AES-256-CBC) — never exposed in the DOM
• TOTP verification with ±30 second time drift tolerance
• Configurable protected usergroups via admin setting dfotp_groups
• Default: Administrators (4) and Developers (8)
• Dark themed UI with gold accents
Preview
1 / 1
MyBB Google Authenticator Login — 2FA login with TOTP code⤢ Tap image for full size
What's included
- Google Authenticator (TOTP) two-factor authentication for MyBB logins
- Protects both member logins (member_do_login_start) and admin logins (admin_login)
- Self-contained — bundles PHPGangsta GoogleAuthenticator library
- QR code setup screen — scan with any authenticator app
- Manual entry key fallback
- Password encrypted into signed token (AES-256-CBC) — never in DOM
- TOTP verification with ±30 second time drift tolerance
- Configurable protected usergroups via admin setting
- Dark themed UI with gold accents
At a glance
| Platform | MyBB plugin |
|---|---|
| Latest version | v2.0.0 |
| Download size | 14.0 KB |
| Released | 4 Nov 2026 |
| Downloads | 0 |
| Access | Free — sign in to download |
| Platform | MyBB 1.8.x |
| PHP | 7.2+ |
| Database | 1 table (dfloginotp) |
| Template change | 2 new templates |
| Settings | 1 in ACP |
| Hooks | member_do_login_start, admin_login |
| Files | 11 in the archive |
Requirements
- MyBB 1.8.x
- PHP 7.2+ (uses random_bytes, hash_equals)
- PHP OpenSSL extension
Checksum
Verify your download before you upload it to your board.
1f8e96febf6f4c1917d7a2b6d8488d7149b6e6db0b8d17eb5b4825c1c49a015eInstall it
1. Upload dfloginotp.php to /inc/plugins/ and the dfloginotp/ directory to /inc/plugins/dfloginotp/
2. Admin CP → Plugins → DF Login OTP → Install → Active
3. Admin CP → Settings → DF Login OTP: Protected groups → Set usergroup IDs (default: 4,8)
4. Users in protected groups see a 2FA setup screen on first login
2. Admin CP → Plugins → DF Login OTP → Install → Active
3. Admin CP → Settings → DF Login OTP: Protected groups → Set usergroup IDs (default: 4,8)
4. Users in protected groups see a 2FA setup screen on first login
Questions people ask
Q: Does it create database tables?
A: Yes — one table (dfloginotp) to store TOTP secrets. Dropped on uninstall.
Q: Does it edit templates or core files?
A: No core file edits. It adds two templates (dfloginotp_page, dfloginotp_setup) which are removed on uninstall.
Q: How do I check the file I downloaded?
A: Every release page prints a SHA-256 checksum. Hash the archive locally and compare.
Q: How are updates delivered?
A: Each version is its own release with a changelog. Install the new one over the old one.
Q: What usergroups are protected by default?
A: Administrators (4) and Developers (8). Change via Admin CP → Settings → DF Login OTP: Protected groups.
Q: What if a user loses their authenticator?
A: Delete the user's row from the dfloginotp table to force re-setup on next login.
All releases
| Version | Released | Size | Downloads | Changelog |
|---|---|---|---|---|
| v2.0.0 latest | 04 Nov 2026 | 14.0 KB | 0 | v2.0.0 — 2026-11-04 - Rebuilt as Google Authenticator (TOTP) two-factor authentication — replaces the email-code v1. - Self-contained — bundles PHPGangsta GoogleAuthenticator library, no MyBB core dependency. - QR code setup screen with manual entry key fallback. - Password encrypted into signed token (AES-256-CBC) — never in the DOM. - TOTP verification with ±30 second time drift tolerance. - Configurable protected usergroups via admin setting dfotp_groups. - Dark themed UI with gold accents. v1.0.1 — 2026-10-24 - One-use email codes in front of the native forum login. |
Ratings & reviews
No ratings yet — the first one will be real, not seeded
Ratings come from registered members only — that is the whole point.
Sign in to rateFree account, 20 seconds. Create one
More MyBB plugins
Credits Plugin for MyBB
The points engine the rest of the suite builds on — earned automatically, spent in the shop.
Support Desk Plugin for MyBB
A private support desk inside your forum — tickets, staff view, no third-party helpdesk.
Achievements Plugin for MyBB
Ten automatic milestone badges — posts, threads, hours online, tenure — on profiles and a…
Slate Theme for MyBB
Calm slate-dark theme for MyBB 1.8, built on the stock template set so a version bump…