Two-Factor Authentication | v1.0.3

Magento 1
Protect your store from key loggers, network data sniffing, unsecured wifi connections, and other threats. Use password and the security code from your smartphone to enhance admin security. Make sure only authorized users access admin panel.
Secure login into Magento admin panel
Protection against connection sniffing
Secure against spyware
IP address white listing
Varied authentication conditions
30 Days moneyback
50% Off updates
120 Days free support

Enhance Magento admin security with two factor authentication

It's easier than you think for someone to steal your security credentials when you access your account. Even having a strong password doesn't completely protect you. That is why a lot of our popular sites like Google/Gmail, Apple, Facebook, Amazon Web Services and many others have added two-factor authentication. Even Google strongly recommends using this type of protection on each site. This system uses both your password and your phone to protect your account.

In order to keep your data safe in Magento admin panel we have launched Two-Factor Authentication extension that combines Google Authenticator application and your smart phone to verify the admin session. Since now you can be absolutely sure that your orders, customers’ data and other private information are completely secured.

Protect your Magento backend against unauthorized logins and fraudsters

Assured access into your admin panel

To start using two-factor authentication you will need to enter a temporary security code when logging in to Magento. Each security code changes every 30 seconds, so even if someone gets to known your password, he won’t be able to log in to your Magento backend.

Secure against data sniffing

With our Magento secure setup option each particular security code can be used only once, so even if both your password and the security code are sniffed they couldn’t be used to get logged in.

Protection against key logging

If you log in from a device or PC where the keypad input is allowed, your password becomes vulnerable. However, with Two-Factor Authentication you don’t have to worry about that anymore. Apart from the password the scammer also needs to know your time-based security code, that changes every 30 seconds and can only be used successfully once before it expires.

Set flexible authentication requirements

IP address white listing for verification code

Some IP addresses (e.g. your company IP) are reliable and don’t require entering the verification code. To log in from this IP address without checkup you just need to add it to the IP White List in the admin panel.

Flexible authentication requirements

It is possible to have various levels of security requirements for each admin account. E.g. you can create an account that requires only the password or both the password and passcode. This way you will use one account for logging from trusted networks and another one for logging from untrusted networks.

Additional Information

This magento secure login module is compatible with iPhone (iOS 3.1+), iPad, iPod touch, Android (1.5+) and BlackBerry (OS 4.5-6.0) smartphone. Anyway, please make sure your device is able to run the Google Authenticator application before the purchase. Since this application is used to generate security codes required for login.

Fit up your admin management system with more powerful tools

Log all actions performed in the store backend by admin users

With the help of Admin Actions Log module you can easily find out what have been done in your store admin panel and by whom. Enhance your store protection and easily block all malicious login attempts.

Let your admin users and vendors see and edit only particular categories and products

You have also a great opportunity to improve your website monitoring. Assign permissions to users for editing certain products, categories, Magento store-views and websites. With the help of Advanced Permissions extension one can easily manage online stores with rich item catalogs as well as multivendor and maltilanguage stores. Let anyone play their unique roles to make the work of the whole store even more productive.

Reasons to choose

Other Features

  • 100% Open Source — Easy To Customize
  • Follows Magento Code Architecture
  • Separated HTML/CSS/JS
  • W3C Validated Code

Online Extension User Guide

* The name "Magento" and the logo are the trademarks of Magento, Inc.

General Questions

How can I pay for Amasty extensions?

You can pay for our extensions in any convenient for you way as a full range of payment methods are supported. The most common means are credit card or PayPal. Security and fraud protection are guaranteed.

What is the license policy? On how many websites can I use Amasty extensions?

Our license allows you to use a single extension license on one Magento installation.

Extension is not domain related, but installation related. If you run several domains on the same instance of Magento, you can use one extension license. However if you run each website on a new installation of Magento, you need separate license for each of them.

The full end-user license agreement is located here:

How to install Magento extension by Amasty?

Each Amasty extension pack includes module files, an installation guide, a user guide and license text. Depending on the extension you purchase, there also may be import files which can be used by you as examples.

Amasty extensions are easy to install. All you need is to have FTP/SSH access details, and follow 3 steps to complete.

  • Unpack a "zip" file you download.
  • Upload all files from the "Step 1" and then from the "Step 2" folders to the root folder of your Magento installation.
  • Clear the cache.

If you are using code compilation, before installing the extension it's necessary to disable it! After you install, click the "Run Compilation Process" button in Admin - System - Tools - Compilation to recompile.

Please also check the extensions installation video guide:

Still unsure? Have complicated configurations or a lot of modules? We can offer professional installation service as well!

Can I test an Amasty extension on a staging site before transferring it to a live one?

Yes, you can install any Amasty extension on a test site and configure all the settings there before doing it on your live store.

Can I get a refund if an extension doesn’t suit me?

Absolutely. Amasty provides a 30-day money back guarantee. No risks for you.

Will I get any other benefits?

Yes! The good news is that every Amasty customer becomes a member of our Loyalty Program and can get a discount of up to 15%. You can find more information about it on the Program page. This is our way to thank you for being our client.

Отличная штука, уже помогло несколько раз от атак.
хотелось бы только, чтобы обновления были бесплатными бессрочно.
Easy to use & helpful
I’ve installed 4 amasty plugins already and I’m going to grab two more in the nearest future.
good for security
I’m very conscious of security and try to use additional methods not only for my s tore but also for other things. I already have two-factor authentication in my Gmail account and can see that it works great. So once I saw this module, I decided to add this additional login step to my store. I can’t say that I have many strange login attempts according to server logs but still I prefer to be on a safe side.
The module works ok, the setup process went smooth and I didn’t even need to contact support managers.

Write Your Own Review

You're reviewing: Two-Factor Authentication

Version 1.0.3 - November 05, 2015
– Admin routing patch (SUPEE-6788) compatibility
Version 1.0.1 - May 19, 2015
– Minor improvements