Protect your OpenCart store with an extra verification step for admin and customer accounts. The module supports Google Authenticator, Twilio SMS, and email code verification, helping reduce the risk of unauthorized access even if a password is exposed. It is easy to set up, supports separate admin and customer scenarios, and gives you a clearer way to secure access to your store.

Key Benefits

Better security for admin and customer accounts — Add a second layer of protection beyond a standard password to help prevent unauthorized logins.

Support for popular verification methods — Choose between app-based codes (Google Authenticator), SMS via Twilio, or email verification depending on your store’s needs.

Flexible management for users — Customers can manage their own 2FA settings from the storefront, while administrators can reset access for specific users if needed.

Clearer setup and flow — The module is built for OpenCart 2.x–4.x and provides a straightforward way to enable 2FA without complex site-wide changes.

Two-factor authentication for Admin and Customers — Enable 2FA for store administrators and customers with separate control settings.

Multiple verification methods — Support for Google Authenticator (TOTP), Twilio SMS, and email-based code delivery.

User-level 2FA management — Customers can turn 2FA on or off and generate new secret keys directly from their account page.

Admin-side 2FA reset — Administrators can reset the 2FA status for any user to help them regain access if they lose their device.

Customizable settings — Control the 2FA flow, delivery methods, and Twilio API credentials from the admin panel.

Compatibility — Full support for OpenCart versions 2.x, 3.x, and 4.x.

• Upload the extension archive via the OpenCart Installer.
  
• Install the module in the Extensions section and refresh modifications.
  
• Go to the module settings to enable 2FA for admin and/or customer accounts.
  
• Configure your preferred verification methods (Google Authenticator, Email, or Twilio SMS).
  
• Save your settings and test the login flow on the admin and storefront sides.

FAQ
Can customers turn 2FA on or off in their own account?
Yes. Customers can manage their 2FA status directly from the storefront account page.
What happens if 2FA is disabled?
If 2FA is turned off, the user can sign in using only their regular login and password.
Can the administrator reset 2FA for a specific user?
Yes. The administrator can reset 2FA for any user if they lose access to their verification method.
Can SMS or email be used instead of app-based verification?
Yes. The module supports Twilio SMS and email code verification. Note that Twilio requires a separate setup in the admin panel.
Can the admin-side flow be checked in the demo?
Yes. You can use the demo to test the activation process, form verification, and key creation on the admin side.


Version 1.0.1
*Added Ukrainian, German, Spanish, and French localizations.
*Added OpenCart 4.x support.
*Updated version data.