MicroPyramid/django-mfa

Django-mfa (Multi Factor Authentication) is a simple package to add extra layer of security to your django web application. It gives web app a randomly changing password as an extra protection and supports u2f too

2fa
django
mfa
python
security
u2f

django-mfa

Documentation Status

image

Latest Release

image

Code Health

image

Django-mfa(Multi-factor Authentication) is a simple django package to add extra layer of security to your web application. Django-mfa is providing easiest integration to enable Multi factor authentication to your django applications. Inspired by the user experience of Google\'s Authentication, django-mfa allows users to authenticate through text message(SMS) or by using token generator app like google authenticator.

We welcome your feedback on this package. If you run into problems, please raise an issue or contribute to the project by forking the repository and sending some pull requests.

This Package is compatible with the following Django versions: 2.2, 3.0, 3.1, 3.2. Documentation is available at readthedocs(http://django-mfa.readthedocs.io/en/latest/)

Quick start

Installation

The Git repository can be cloned with this command:

git clone https://github.com/MicroPyramid/django-mfa

The django_mfa package, included in the distribution, should be placed on the PYTHONPATH.

Otherwise you can just easy_install -Z django-mfa or pip install django-mfa.

Settings

  1. Add app name in settings.py:

    INSTALLED_APPS = [
       '..................',
       'django_mfa',
       '..................'
    ]
    
  2. Add \'django_mfa.middleware.MfaMiddleware\' to your project middlewares:

    MIDDLEWARE = [
       '....................................',
       'django_mfa.middleware.MfaMiddleware',
       '....................................',
    ]
    
  3. Optional issuer name. This name will be shown in the Authenticator App along with the username

    MFA_ISSUER_NAME = \"Cool Django App\"

  4. Optionally enable remember-my-browser. If enabled, the browser will be trusted for specified number of days after the user enters the code once:

    MFA_REMEMBER_MY_BROWSER = True
    MFA_REMEMBER_DAYS = 90
    

Urls

Add the following to your root urls.py file.

urlpatterns = [
    ...

    url(r'^settings/', include('django_mfa.urls')),
]

Done. With these settings you have now, you will get the MFA features.

You can try it by hosting on your own or deploy to Heroku with a button click.

image

Visit our Django web development page Here

We welcome your feedback and support, raise github ticket if you want to report a bug. Need new features? Contact us here

Stars
183
0.55% more than last month
Forks
81
Open Issues
16