2-Factor Authentication (2FA)

Overview

ProcFu allows you to secure sensitive apps with an optional 2-Factor Authentication (2FA) step. This is available for Username/Password and MySQL authentication types.

Enabling 2FA

1. In the authentication screen settings, choose your desired Authentication type.
2. Enable the 2-Factor Auth checkbox.
3. Select the appropriate Email or Mobile field under "Email/Mobile Field".

Ensure the field contains a valid email address or phone number.

How It Works

1. User logs in with the correct username and password.
2. A secret code is sent via email or SMS based on the selected field.
3. The user is prompted to enter the code before gaining access.

Secret Code Screen

After login, users see a screen where they must enter the received code to proceed.

---

Customizing 2FA Messages

You can customize or translate 2FA messages using ProcFu’s translations mechanism.

Example:

Default text:

Your ACME Portal sign-in code is: 1234

To customize it, add this code in App Configuration → Before Process:

translations = {
    "Your ACME Portal sign-in code is": "Please use the following code to sign into ACME Portal"
};

This works for both email subject and body.

Email & SMS Delivery

Email

Emails are sent using your configured SMTP server. If you have multiple, it is sent from the first one in the list.

If none are available, it will fall back to its default mail service.

SMS

• Format phone numbers as CountryCodeNumber (e.g., 14155552671 for a US number).
• Do not include the + sign.
• Be aware that some providers or regions may block SMS messages.
• Tip: For more reliable delivery, prefer using Email for 2FA.