2FA6.0.3
A password is no longer enough.
A second factor for every Dolibarr account, with a TOTP app, a YubiKey or biometrics (Windows Hello, Touch ID), plus backup codes and several devices per user.
- Price
- 59 € excl. VAT
- Compatible
- Dolibarr 16 to 24
- Languages
- French, English
What you get
Three methods, each user picks.
TOTP app, YubiKey or biometrics (Windows Hello, Touch ID), with ten backup codes and several devices per account.
Users manage their own devices.
They add, rename or revoke devices and backup codes from their own user card, without asking you.
You set the rule.
Optional or mandatory 2FA, lockout after failures, log of every attempt. Document downloads and exports are protected too.
In pictures
Specifications
- Current version
- 6.0.3
- Compatible
- Dolibarr 16 to 24
- Price
- 59 € excl. VAT
- Updated
- 3 October 2026
- Languages
- French, English
- Documentation
- Dolibarr wiki
Frequent questions
I lost my phone, how do I sign in?
Use one of your 10 backup codes instead of the app code. If you have none left, ask an administrator to reset your 2FA from the module administration. You will set up a new one at your next login.
Which apps work with 2FA?
Any TOTP app works, for example Google Authenticator, Microsoft Authenticator, Authy, 1Password, Bitwarden, Aegis or FreeOTP. The QR code is generated on your server, without going through a third-party service. Each user can also pick a security key such as a YubiKey, or their device biometrics (Windows Hello, Touch ID, Face ID).
Can 2FA be made mandatory for everyone?
Yes, you just tick a box in the module administration. Users who do not have a second factor yet are asked to set one up at their next login. The dashboard shows how adoption is going, and you can reset an account's 2FA or make it enrol again.
The YubiKey or Windows Hello does not work
Security keys and biometrics (WebAuthn / FIDO2) only work when Dolibarr is opened over HTTPS. This is a browser rule, the module cannot change it. As long as you are on HTTP, use the TOTP app or the backup codes.
I am on Dolibarr 16, 17 or 18. Should I update?
Yes, install version 6.0.3 or later. Before it, Dolibarr 16 to 18 did not ask for the second factor, because the check relied on a hook that only exists from Dolibarr 19. After replacing the files, disable then re-enable the module.
Customer reviews
No review published yet. If you use one of my modules, your feedback will help the next customers decide.
Reviews are left freely by customers, read by me before publication and shown with their date. No review is paid for. I do not publish off-topic, abusive or promotional messages.
Announcements
When I fix a vulnerability, when an update is needed or when something changes, I write it here.
No announcement yet.
Get notified of new versions
One email per new release and per security alert, nothing else. One-click unsubscribe.