Description

Please note: this module is only compatible with versions 18 to 23

Akyras 2FA – Multi-Factor Authentication for Dolibarr

Secure your Dolibarr access with a modern, fast and pleasant experience.

Maximum security. Premium interface. Instant deployment.

Akyras 2FA brings strong enterprise-grade authentication to Dolibarr: TOTP, FIDO2/WebAuthn Passkeys, YubiKey OTP, backup codes, mandatory policies, security alerts, and a comprehensive dashboard for administrators.
Everything is designed to be simple to use and easy to manage.

A modern user experience

• Clear and elegant connection interface.
• Step-by-step guided enrollment (TOTP, FIDO2 key, YubiKey).
• Page dedicated to 2FA activation, perfectly integrated with Dolibarr.
• Fully mastered “Remember me” option (configurable duration).
• Simple backup code management and admin reset.

Full control for administrators

• Mandatory policy: global, per group, or per user.
• Detailed log: login attempts, IP, User-Agent, success/failure.
• Pagination, advanced search and CSV export of logs.
• Automatic email alerts in case of suspicious activity.
• Centralized view of users and their 2FA status.
• Complete UI redesign of the admin page.

Pro-level reliability and security

• Compatible with Dolibarr v18 to v23.
• Encrypted TOTP secrets, hashed fallback codes.
• Secure cookies: Secure, HttpOnly, SameSite=Strict.
• Anti-bruteforce protection with configurable observation window.
• Automatic session rotation after login.
• HTTPS required for WebAuthn.
• Dolibarr compliance: root/custom, dol_include_once, DoliStore packaging.

Available authentication methods

• TOTP (Google Authenticator, Authy, FreeOTP, Token2…)
• FIDO2 / WebAuthn (passkeys, USB/NFC security keys)
• YubiKey OTP (via YubiCloud)
• One-time backup codes

Changelog Summary (Major Features)

• FIDO2/WebAuthn
• YubiKey OTP
• Email alerts
• Search, pagination and log export
• Compulsory enrolment
• UI redesign
• Key recovery
• Sustainability of the rememberMe cookie
• Dolibarr compatibility
• Secure QR Code
• Enforcement by role/group/user

Why choose Akyras 2FA?

• Enhanced security without complexity.
• Immediate adoption thanks to passkeys.
• Fewer support tickets thanks to guided enrollment.
• Professional and intuitive interface.
• Deploy to production in minutes.