Piwigo.org

GJSchaller · 2023-11-12 18:18:28

Hello, I am looking for a way to make my Piwigo more secure, and preventing bots and bad actors from trying to log into my Piwigo site.

A lot of other sites / apps I use have a 2FA / MFA setup, where you are given a code (either a string of characters, or a QR code), and you add it to an App on your phone, such as Google Authenticator, Duo, Authy, etc. When you try to log into your account, you are prompted to type in this code from your phone.

Can something like this be added to Piwigo, either as a core security feature, or a plugin? I did look for a pluging, but didn't see one that offered this functionality.

Thank you!

k5 · 2023-11-12 19:39:37

hello

https://piwigo.org/ext/extension_view.php?eid=933

for exemple

k5 · 2023-11-12 19:49:47

erAck · 2023-11-12 22:45:19

I think they more meant TOTP instead of some mailed verification code, but there doesn't seem to be such thing.

GJSchaller · 2023-11-13 02:29:57

erAck - yes, exactly, thank you. My setup makes it tricky to send emails, so I prefer 2FA via TOTP. (That was the phrase I was looking for, thank you!)

homdax · 2023-11-13 11:37:46

Mind you that MFA does not work on all themes, I have been testing some boostrap themes and is right now a showstopper since the available captcha solutions do not work on most, if not all, of those themes

GJSchaller · 2024-06-25 23:01:51

Hello, still looking for support on this - would it be possible to implement TOTP for Piwigo?

Because my home ISP blocks port 25, I can't send emails from my home server reliably, and TOTP would make it easier to secure my site / account.

Last edited by GJSchaller (2024-06-25 23:02:22)

SchuminWeb · 2024-07-15 10:00:53

Set it up so that I can use Google Authenticator for 2FA, and you've got a winning combo.

eh · 2025-11-24 08:05:37

When is Piwigo planning to introduce multi-factor authentication (via email or TOTP) and other password-guessing countermeasures for hosted galleries (xyz.piwigo.com)?
The lack of MFA being available significantly increases the likelihood of user account compromise and is highly problematic in 2025.

Linty · 2025-11-24 17:12:29

Hello eh,

Piwigo 16 arrives with a new 2FA plugin!

eh · 2025-11-25 07:35:49

That's great to hear, thank you for letting me know!

Linty wrote:
Hello eh,

Piwigo 16 arrives with a new 2FA plugin!

Piwigo.org

Announcement

#1 2023-11-12 18:18:28

Feature Request - 2FA using 6-Digit Code

#2 2023-11-12 19:39:37

Re: Feature Request - 2FA using 6-Digit Code

#3 2023-11-12 19:49:47

Re: Feature Request - 2FA using 6-Digit Code

#4 2023-11-12 22:45:19

Re: Feature Request - 2FA using 6-Digit Code

#5 2023-11-13 02:29:57

Re: Feature Request - 2FA using 6-Digit Code

#6 2023-11-13 11:37:46

Re: Feature Request - 2FA using 6-Digit Code

#7 2024-06-25 23:01:51

Re: Feature Request - 2FA using 6-Digit Code

#8 2024-07-15 10:00:53

Re: Feature Request - 2FA using 6-Digit Code

#9 2025-11-24 08:05:37

Re: Feature Request - 2FA using 6-Digit Code

#10 2025-11-24 17:12:29

Re: Feature Request - 2FA using 6-Digit Code

#11 2025-11-25 07:35:49

Re: Feature Request - 2FA using 6-Digit Code

Linty wrote:

Board footer