Come together with the global Drupal community in Rotterdam, 28 Sept – 1 Oct 2026. Sessions, contribution, connection, and Early Bird savings until 8 June.Add functionality and customize your Drupal application with thousands of projects contributed by our amazing community.
A module is code that extends Drupal's by altering existing functionality or adding new features. You can use modules contributed by others or create your own. Learn more about creating and using Drupal modules.
Spam Master
Spam Master was born out of need to protect our website against constant malicious spam registrations, comments and contacts and exploits like HTTP and HTTPS DDoS (denial-of-service), SQL...
Categories: Access control, Security, User engagement
Two Factor Authentication - TFA / Passwordless Login
Secure your Drupal website with enterprise-grade Two-Factor Authentication (2FA) and Passwordless Login, designed for high-security environments. It has a plethora of multi-factor authentication...
Categories: Access control, Integrations, Security
Status Dashboard Client
The Status Dashboard Client module is developed as a supporting module for the base module Status Dashboard. The Status Dashboard Client module works on the client site and send information about...
Categories: Administration tools, Developer tools, Security
Auto UnBan
This augments core's ban module to automatic unban IP's after a period of time. Unlike other ban modules (advban and autoban), this works with ban module rather than replacing it. This is best used...
Categories: Security
Flood settings
Administer flood settings easily from an admin page.
Categories: Access control, Security
Node Noindex
This module lets the administrator set the HTML robots metatag to noindex for a specific node. This will instruct well-behaved search engine robots to not index the node, preventing the node from...
Categories: Search engine optimization (SEO), Security, Site search
Sidr: Accessible Mobile Menus
The Sidr integration for Drupal allows you to create "trigger" blocks. Clicking on these triggers use jQuery Sidr libraries to slide in/slide out a specified target element. This is very useful for...
Categories: Developer tools, Security, Site structure
TFA Email OTP Plugin
This module provides a TFA plugin to send an One-Time password (code) via email. Which is required by Create "Email one-time-code" Validation Plugin & related Setup Plugin Post-Installation It is a...
Categories: Security
AWS Secrets Manager
AWS Secrets Manager This Drupal module adds a new key provider for the Key module - it allows you to encrypt data using AWS Secrets Manager. Get Started This guide assumes you have an AWS account...
Categories: Security
AES encryption
This module is unsupported due to a security issue the maintainer didn’t fix. See AES - Critical - Unsupported - SA-CONTRIB-2017-027 for details. If you want to use this module, your options are:...
Categories: Administration tools, Developer tools, Security
Google Authenticator login
This module will allow you to add Time-based One-time Password algorithm (TOTP, also called "Two-Factor Authentication - TFA" or "Multi-Factor Authentication - MFA") support to user logins. It...
Categories: Security
Project Versions
Project Versions is a fork of the System Status module, but has been updated for Drupal 10, simplified, and hardened. The data format is no longer compatible with the Systems Status module. It can...
Categories: Security, Developer tools
Trick Question
A very small and simple CAPTCHA-type spam prevention module. A lightweight, compact and simple alternative to larger and more complex modules such as The excellent and very popular Captcha module...
Categories: Security
Anonymous CSRF Token
This module generates and validates CSRF tokens for anonymous users. By default Drupal generates CSRF tokens only for authenticated users. See also Anonymous forms vulnerable to CSRF not considered...
Categories: Access control, Developer tools, Security
Password Policy Pwned
This is a Drupal 8 module that adds a Pwned Passwords plugin to the D8 Password Policy module. Have I Been Pwned The plugin uses the Have I Been Pwned Passwords API. To protect privacy, the API...
Categories: Security
LDAP / Active Directory Integration
With the LDAP / Active Directory Integration module, your users can easily log in to Drupal using the same credentials they use in Active Directory (AD). Streamline your authentication process with...
Categories: Import and export, Integrations, Security
Automated Logout Alterable
This module provides a way to administrate session limit. The session timeout can be set per user role or by a global session timeout. Just like the module automated logout. This module, however,...
Categories: Administration tools, Security
Image Allow Insecure Derivatives
Provides a user interface to allow Drupal to bypass the token security check when generating image derivatives. Details Drupal 7.20 comes with a security fix that changes all image derivative URLs...
Categories: Developer tools, Security
OAuth Login - OAuth OIDC SSO
OAuth & OIDC Login - OAuth2 Client SSO module allows users residing at OAuth 2.0 capable OAuth / OpenID Provider or any OIDC ( OpenID Connect ) provider to log in to your Drupal website. We support...
Categories: Access control, Integrations, Security
Prevent Version Disclosure
Prevent Version Disclosure This module does only one thing. It hashes the version number that is usually attached as a query parameter to the end of the src property of the script tag. There is no...
Categories: Security
Google Secrets Store API
This is a Drupal 8 module to manage storage of Google Secrets files, which are used by some applications that use the Google API. The module defines a new plugin type, GoogleSecretsStore, and two...
Categories: Developer tools, Integrations, Security
Tag1 D7ES
Integration for Tag1's Drupal 7 Extended Support (D7ES) service: https://d7es.tag1.com/ Installation and use of this module constitutes your acceptance of and agreement to be bound by Tag1...
Categories: Developer tools, Security
Site Guardian
The Site Guardian module securely exposes information relating to your site's core, modules, versions, updates, etc. in JSON so that it can be consumed elsewhere. This allows you to more easily...
Categories: Administration tools, Developer tools, Security
Production check & Production monitor
[#2059569] is in progress and 8.x-1.0-alpha7 has been released. Please test thoroughly and submit any issues you encounter. Performance monitoring note: kbahey was kind enough to grant me...
Categories: Developer tools, Security, Integrations
Vault for Drupal
Core APIs for integrating Drupal with Hashicorp Vault or the Linux Foundation OpenBao. What is Vault for Drupal? Vault for Drupal is a tool for securely accessing secrets using the Hashicorp Vault...
Categories: Security