FM / _sources

/usr/share/doc/phpmyadmin/html/_sources/

/usr/share/doc/phpmyadmin/html/_sources

Name	Size	Mode	Actions
bookmarks.rst.txt	2463	0644	edit dl rm
charts.rst.txt	4743	0644	edit dl rm
config.rst.txt	120510	0644	edit dl rm
copyright.rst.txt	1621	0644	edit dl rm
credits.rst.txt	28021	0644	edit dl rm
developers.rst.txt	380	0644	edit dl rm
faq.rst.txt	94809	0644	edit dl rm
glossary.rst.txt	15155	0644	edit dl rm
import_export.rst.txt	10213	0644	edit dl rm
index.rst.txt	573	0644	edit dl rm
intro.rst.txt	3155	0644	edit dl rm
other.rst.txt	916	0644	edit dl rm
privileges.rst.txt	3264	0644	edit dl rm
relations.rst.txt	3342	0644	edit dl rm
require.rst.txt	1683	0644	edit dl rm
security.rst.txt	4607	0644	edit dl rm
settings.rst.txt	1015	0644	edit dl rm
setup.rst.txt	43403	0644	edit dl rm
themes.rst.txt	2938	0644	edit dl rm
transformations.rst.txt	7949	0644	edit dl rm
two_factor.rst.txt	2873	0644	edit dl rm
user.rst.txt	195	0644	edit dl rm
vendors.rst.txt	1969	0644	edit dl rm

Edit: /usr/share/doc/phpmyadmin/html/_sources/two_factor.rst.txt (2873B)

.. _2fa:

Two-factor authentication
=========================

.. versionadded:: 4.8.0

Since phpMyAdmin 4.8.0 you can configure two-factor authentication to be
used when logging in. To use this, you first need to configure the
:ref:`linked-tables`. Once this is done, every user can opt-in for the second
authentication factor in the :guilabel:`Settings`.

When running phpMyAdmin from the Git source repository, the dependencies must be installed
manually; the typical way of doing so is with the command:

.. code-block:: sh

composer require pragmarx/google2fa-qrcode

Or when using a hardware security key with FIDO U2F:

.. code-block:: sh

composer require samyoul/u2f-php-server

Authentication Application (2FA)
--------------------------------

Using an application for authentication is a quite common approach based on HOTP and
`TOTP <https://en.wikipedia.org/wiki/Time-based_One-time_Password_Algorithm>`_.
It is based on transmitting a private key from phpMyAdmin to the authentication
application and the application is then able to generate one time codes based
on this key. The easiest way to enter the key in to the application from phpMyAdmin is
through scanning a QR code.

There are dozens of applications available for mobile phones to implement these
standards, the most widely used include:

* `FreeOTP for iOS, Android and Pebble <https://freeotp.github.io/>`_
* `Authy for iOS, Android, Chrome, OS X <https://authy.com/>`_
* `Google Authenticator for iOS <https://apps.apple.com/us/app/google-authenticator/id388497605>`_
* `Google Authenticator for Android <https://play.google.com/store/apps/details?id=com.google.android.apps.authenticator2>`_
* `LastPass Authenticator for iOS, Android, OS X, Windows <https://lastpass.com/auth/>`_

Hardware Security Key (FIDO U2F)
--------------------------------

Using hardware tokens is considered to be more secure than a software based
solution. phpMyAdmin supports `FIDO U2F <https://en.wikipedia.org/wiki/Universal_2nd_Factor>`_
tokens.

There are several manufacturers of these tokens, for example:

* `youbico FIDO U2F Security Key <https://www.yubico.com/fido-u2f/>`_
* `HyperFIDO <https://www.hypersecu.com/hyperfido>`_
* `Trezor Hardware Wallet <https://trezor.io/?offer_id=12&aff_id=1592&source=phpmyadmin>`_ can act as an `U2F token <https://wiki.trezor.io/User_manual:Two-factor_Authentication_with_U2F>`_
* `List of Two Factor Auth (2FA) Dongles <https://www.dongleauth.info/dongles/>`_

.. _simple2fa:

Simple two-factor authentication
--------------------------------

This authentication is included for testing and demonstration purposes only as
it really does not provide two-factor authentication, it just asks the user to confirm login by
clicking on the button.

It should not be used in the production and is disabled unless
:config:option:`$cfg['DBG']['simple2fa']` is set.

.. _2fa: Two-factor authentication ========================= .. versionadded:: 4.8.0 Since phpMyAdmin 4.8.0 you can configure two-factor authentication to be used when logging in. To use this, you first need to configure the :ref:`linked-tables`. Once this is done, every user can opt-in for the second authentication factor in the :guilabel:`Settings`. When running phpMyAdmin from the Git source repository, the dependencies must be installed manually; the typical way of doing so is with the command: .. code-block:: sh composer require pragmarx/google2fa-qrcode Or when using a hardware security key with FIDO U2F: .. code-block:: sh composer require samyoul/u2f-php-server Authentication Application (2FA) -------------------------------- Using an application for authentication is a quite common approach based on HOTP and `TOTP `_. It is based on transmitting a private key from phpMyAdmin to the authentication application and the application is then able to generate one time codes based on this key. The easiest way to enter the key in to the application from phpMyAdmin is through scanning a QR code. There are dozens of applications available for mobile phones to implement these standards, the most widely used include: * `FreeOTP for iOS, Android and Pebble `_ * `Authy for iOS, Android, Chrome, OS X `_ * `Google Authenticator for iOS `_ * `Google Authenticator for Android `_ * `LastPass Authenticator for iOS, Android, OS X, Windows `_ Hardware Security Key (FIDO U2F) -------------------------------- Using hardware tokens is considered to be more secure than a software based solution. phpMyAdmin supports `FIDO U2F `_ tokens. There are several manufacturers of these tokens, for example: * `youbico FIDO U2F Security Key `_ * `HyperFIDO `_ * `Trezor Hardware Wallet `_ can act as an `U2F token `_ * `List of Two Factor Auth (2FA) Dongles `_ .. _simple2fa: Simple two-factor authentication -------------------------------- This authentication is included for testing and demonstration purposes only as it really does not provide two-factor authentication, it just asks the user to confirm login by clicking on the button. It should not be used in the production and is disabled unless :config:option:`$cfg['DBG']['simple2fa']` is set.