TwoFactorX

twofactorx

  • By jako
  • Latest release October 5, 2026 (28 days ago)

About

With this package for MODX Revolution the manager login can be secured with a two-factor authentication. The ‘Login’ extra can be secured with a pre-hook and a QR Code for saving the authenticator secret can be generated with a snippet. TwoFactorX is a complete rewrite of GoogleAuthenticatorX.

Installation & usage

Install via package manager. When the system setting enable_2fa is enabled, a manager user has to verify the TOTP secret. Otherwise, the authenticator secret verify window is displayed with each manager load. When it is verified, the manager user has to use the TOTP key to login into the manager. The TOTP authentication can be disabled on manager user base.

At a glance

MODX 3 compatibility unknown. Based on our testing and community reports where available.

  • Developer jako
  • Latest release October 5, 2026 (28 days ago)
  • First seen in SiteDash October 5, 2026 (28 days ago)
  • License GPLv2
  • MODX support 2.8 – 100.0

Releases 14 indexed releases

Changelog
MODX.com

1.1.4-pl

October 5, 2026

28 days ago

- Fix complete bypass of the second authentication factor

The security issue was detected by Sosecure; Grim The Ripper Team by SOSECURE Thailand; Mr. Warathap Ratsameekomon
MODX.com

1.1.3-pl

July 1, 2026

4 months ago

—
MODX.com

1.1.2-pl

December 15, 2025

10 months ago

—
MODX.com

1.1.1-pl

July 9, 2025

1 year ago

—
MODX.com

1.1.0-pl

July 8, 2025

1 year ago

—
MODX.com

1.0.8-pl

March 2, 2025

1 year ago

—
MODX.com

1.0.7-pl

February 16, 2025

1 year ago

—
MODX.com

1.0.6-pl

September 5, 2024

2 years ago

—
MODX.com

1.0.5-pl

April 24, 2024

2 years ago

—
MODX.com

1.0.4-pl

February 14, 2024

2 years ago

—
MODX.com

1.0.3-pl

February 10, 2024

2 years ago

—
MODX.com

1.0.2-pl

January 11, 2024

2 years ago

—
MODX.com

1.0.1-pl

December 28, 2023

2 years ago

—
MODX.com

1.0.0-pl

December 24, 2023

2 years ago

—

We've also seen 1 unverified version of TwoFactorX in use, but don't list those as we've been unable of confirming they are official releases from an official source.