Still on Drupal 7? Security support for Drupal 7 ended on 5 January 2025. Please visit our Drupal 7 End of Life resources page to review all of your options.Add functionality and customize your Drupal application with thousands of projects contributed by our amazing community.
A module is code that extends Drupal's by altering existing functionality or adding new features. You can use modules contributed by others or create your own. Learn more about creating and using Drupal modules.
CAPTCHA
Add challenge-response tests to user-facing forms on your site to protect against spambot submissions. Other CAPTCHA types are supported via additional modules. A CAPTCHA is a challenge-response...
Categories: Access control, Security
External Authentication
Description The ExternalAuth module provides a generic service for logging in and registering users that are authenticated against an external site or service and storing the authentication details...
Categories: Access control, Developer tools, Integrations
EU Cookie Compliance (GDPR Compliance)
Help maintain this project If you're interested in supporting or improving this module, please consider joining the #eu_cookie_compliance channel on Drupal Slack. While a maintainer may not always...
Categories: Access control, Administration tools, User engagement
Field Permissions
The Field Permissions module allows site administrators to set field-level permissions to edit, view and create fields on any entity. Features Enable field permissions on any entity, not just nodes...
Categories: Access control, Content display
Password Policy
This module supports enforcing restrictions on user passwords by defining password policies. Overview A password policy can be defined with a set of constraints which must be met before a user...
Categories: Access control, Security
Masquerade
The Masquerade module allows site administrators (or anyone with enough permissions) to switch users and surf the site as that user (no password required). That person can switch back to their own...
Categories: Access control, Administration tools, Developer tools
View Unpublished
Description: This module allows you to grant access for specific user roles to view unpublished nodes of a specific type. Access control is quite granular in this regard. Additionally, using this...
Categories: Access control
Menu Admin per Menu
By default, Drupal allows only users with the Administer menus and menu items permission to add, modify or delete menu items. Menu Admin per Menu allows to give roles per menu admin permissions...
Categories: Administration tools, Access control, Security
Role Delegation
This module allows site administrators to grant specific roles the authority to assign selected roles to users, without them needing the administer permissions permission. For each role, Role...
Categories: Access control, Security
Override Node Options
The Override Node Options module allows permissions to be set to each field within the Authoring information and Publishing options field sets on the node form. It also allows selected field sets...
Categories: Access control, Administration tools, Content editing experience
reCAPTCHA v3
Google reCAPTCHA v3 Module provides a streamlined and secure solution for integrating Google reCAPTCHA v3 and fallback challenges into your Drupal site. This module enhances security without adding...
Categories: Access control, Integrations, Security
Profile
The Profile module provides configurable user profiles. Comparison to user account fields Why use profiles instead of user account fields? With profile, user account settings and user profiles are...
Categories: Access control
Content Access
The Content Access module let you content manage access permission in a flexible and transparant way. It provides two new permissions: view all (allows anyone to view the content) and view own ...
Categories: Access control
Email Registration
Allow users to register using an email address. Users can then log-in using their email address and password for authentication. This module aims to solve some usability issues in managing accounts...
Categories: Access control
OpenID Connect / OAuth client
The OpenID Connect module provides a pluggable client implementation for the OpenID Connect protocol. The server implementation of the protocol is provided by the Simple OAuth (OAuth2) & OpenID...
Categories: Access control
Redirect 403 to User Login
Redirect the HTTP 403 error page to the Drupal /user/login page with an optional message that reads: "Access denied! You must login to view this page." Also, the desired page is appended in the url...
Categories: Access control
CAS
This module provide single sign-on capability for your Drupal site by implementing the CAS protocol. When using this module, local Drupal user accounts are still used, but the authentication...
Categories: Access control, Integrations
Administer Users by Role
This module allows site builders to set up fine-grained permissions for allowing "sub-admin" users to manage other users based on the target user\'s role. The module defines new permissions to...
Categories: Access control, Administration tools, Security
Protected Pages
Module description Protected Pages modules allows the administrator to secure any page by password. Visit module configuration page and add path + password. After that the added path will be...
Categories: Administration tools, Access control
Username Enumeration Prevention
Username Enumeration Prevention is a project which aims to mitigate common ways of anonymous users identifying valid usernames on a Drupal 8+ site. What Is Username Enumeration? Username...
Categories: Access control, Security
Fast Permissions Administration
This module is here to alleviate frustration when trying to manage permissions in Drupal. By providing a better permissions interface hopefully a few innocent keyboards and mice can be saved....
Categories: Access control, Administration tools, Developer tools
Simple OAuth (OAuth2) & OpenID Connect
Simple OAuth is an implementation of the OAuth 2.0 Authorization Framework RFC. Based on League\OAuth2 This module uses the fantastic PHP library OAuth 2.0 Server from The League of Extraordinary...
Categories: Access control, Decoupled, Integrations
Real Name
The RealName module allows the administrator to choose fields from the user profile that will be used to add a "real name" element (method) to a user object. Hook_user is used to automatically add...
Categories: Content display, Access control
Group
The Group module allows you to create arbitrary collections of your content and users on your site and grant access control permissions on those collections Out of the box, Drupal only allows a...
Categories: Access control, Administration tools, Content editing experience
Block Content Permissions
As of Drupal 10.1.x-dev, this module is no longer needed and the "Block Content" core module's permissions can be used instead. See migration notes below. There are no plans to support Drupal 11+....
Categories: Access control, Administration tools
