Compatible XF 1.x versions
  1. 1.5
Additional requirements
Requires cURL to be installed on your server, FIDO U2F requires that you use HTTPS.
Updates duration
12 months, $5 updates
Visible branding

Enhance the security of your forum with our Two Factor Authentication add-on, featuring YubiKey support.

This add-on currently adds the following features:
  • YubiKey OTP Support (Supports every YubiKey produced to date)
  • Ability to enable/disable specific two step authentication methods
  • FIDO U2F support (Supports YubiKey 4 [incl. nano], YubiKey Neo], FIDO U2F Security Key, YubiKey Neo-N, YubiKey Edge, and YubiKey
    Edge-N NOTE: FIDO U2F requires HTTPS, and is currently only supported by Google Chrome.
  • SMS Verification (Supports Twilio currently)
Greatly enhances user security by allowing support for YubiKey two step authentication. Google's two step authentication generates a 6 character code of only integers (1,000,000 possible codes).

YubiKey generates a 44 character key containing a 12 character identifier (public key) that does not change, as well as a 33 character unique one time use private key that changes every time you press the OTP button on your YubiKey, this is nearly 50 quattuordecillion (5 followed by 46 zeroes) possible keys.

If you find a bug, or wish to suggest a feature for this add-on, please do so on our issue tracker located here

Screenshots, because everybody loves screenshots!


If you have any questions regarding this add-on feature please do not hesitate to ask in the discussion thread.

First release
Last update
5.00 star(s) 1 ratings

More resources from ThemeHouse

Latest updates

  1. Version 1.0.4a Released

    Bugs Fixed: Fixed potential error with FIDO U2F
  2. Version 1.0.4 Released

    Enhancements: Support for multiple keys for both U2F an Yubikey OTP
  3. Version 1.0.3 Released

    Features: Support for SMS two-factor authentication Currently supports Twilio

Latest reviews

Great extension of core XF 2FA. This addon adds Yubikey OTP, FIDO U2F and SMS verification via Twilio. All 2FA features are working great on my live site and ThemeHouse is extremely quick to support and open to suggestions.