Skip to Content
Forced Two-Factor Authentication (2FA)
Forced Two-Factor Authentication (2FA)

Forced Two-Factor Authentication (2FA)

by Kitworks Systems
FREE
Odoo Apps Dependencies auth_totp, web
Technical Name kw_2fa
License LGPL-3
Website https://kitworks.systems/
Versions 18.0 19.0

What this module does

Forces every user to enable TOTP two-factor authentication on first login. Blocks system access until 2FA is configured. Compatible with any standard authenticator app.

Mandatory enrollment

Every user must configure TOTP before accessing the system. Existing users are prompted on next login.

Standard authenticator apps

Works with Google Authenticator, Microsoft Authenticator, Authy and any RFC 6238 compatible app.

Block until enabled

Login is denied with a clear message until 2FA setup is complete. No backdoor for unenrolled accounts.

Audit-friendly

Built on top of the standard auth_totp module so all enrolment history flows through native logs.

See it in action

Authenticator app setup page with QR code on first login

First login forces TOTP enrolment. Scan once with any authenticator and you are in.

Need help?

Questions, customisation or paid support — we’ll get back the same business day.

info@kitworks.systems