Because TOTP and HOTP are open standards (not proprietary protocols), any compliant authenticator app will work with Tiki. There are many options available across platforms, including several that are free and open source:

For a more complete comparison, see the Wikipedia list of OTP applications. Any application that implements RFC 6238 (TOTP) will work.

Step 1: Enable the "Allow users to use 2FA" option in the "Log In" feature. Go to Settings > Control Panels > Log In > General Preferences tab (https://example.com/tiki-admin.php?page=login#contentadmin_login-1) with "Preference Filters" set to Advanced.

Click to expand

Step 2: Install a TOTP-compatible authenticator app on your mobile device. Any app implementing the TOTP standard (RFC 6238) will work. See the "suggested apps" above to pick the one that suits you.

Step 3: Check the "Enable two-factor authentication" option in User Preferences --> Account Information tab and click "Save changes". Note that your current password is required to make changes.

At this step, you need to link Tiki with your authenticator app by scanning the QR Code generated on the User Preferences page under security tab. Click "Show QRCode" to display it, then scan it using your chosen authenticator app.

Click to expand

Step 4: When logging in, open your authenticator app, read the current 6-digit code it displays, and enter it in the "Two-factor Authenticator Code" field on the Tiki login page.

Click to expand

By implementing standardized open algorithms like TOTP and HOTP, Tiki's 2FA support remains interoperable with compliant clients application, giving users full freedom of choice over which software they run on their own devices.

Related links

- Original commit: http://sourceforge.net/p/tikiwiki/code/70793

• 2FA