One Time Password is an opinionated, lightweight, near zero-configuration module with 100% test coverage. It provides two factor authentication to users by way of the Time-based One-time Password Algorithm (RFC 6238).
The 8.x-1.x branch has no configuration options. The 2.x series have a configuration form with one option - Force users to setup TFA. At some point the configuration option might be removed and that option will be controlled by the branch.
Many apps implement this spec, providing users lots of options for storing and managing their one-time-passwords. Some popular apps which will integrate with this module are:
- Google authenticator (iTunes & Google Play)
- Authy
- Authenticator (Windows phone)
- Duo Mobile
An example of the functionality:
![]() |
![]() |
Which TFA module is right for me?
View a comparison of two factor authentication modules.
Related projects
| Attachment | Size |
|---|---|
| Screen Shot 2017-07-10 at 3.04.31 PM.png | 64.77 KB |
| Screen Shot 2017-07-10 at 3.04.46 PM.png | 38.5 KB |
Project information
196 sites report using this module
- Created by sam152 on , updated
Stable releases for this project are covered by the security advisory policy.
Look for the shield icon below.
Releases
The one with an admin form 😱
Development version: 2.x-dev updated 15 May 2025 at 01:29 UTC
Development version: 8.x-1.x-dev updated 15 May 2025 at 01:26 UTC






