--- title: Increase security with multi-factor authentication on your TYPO3 site with v11. url: "https://b13.com/knowledge/multi-factor-authentication-in-typo3-11" description: "Multi-factor Authentication increases security and brings peace of mind to all your TYPO3 users. Check out why we love MFA in #5 in our series of 13 Things We Love About TYPO3 v11." image: "https://b13.com/fileadmin/_processed_/a/a/csm_MFA_191-1_4d480faf62.png" date: 2022-01-17 modified: 2026-08-19 lastUpdated: 2026-08-19 --- # Increase security with multi-factor authentication on your TYPO3 site with v11. [ TYPO3 v11 ](https://b13.com/knowledge/typo3-v11) [ Security ](https://b13.com/knowledge/security) Multi-factor authentication ============================= Increase security with MFA on your TYPO3 site ![](https://b13.com/fileadmin/_processed_/8/5/csm_oli_e138b22557.jpg)Oliver Bartsch 01 February 2022 [ RSS Feed ](https://b13.com/rss.xml) ![multi-factor authentication](https://b13.com/fileadmin/_processed_/7/c/csm_MFA_1-1_be681503e0.webp) **Increase security with MFA on your TYPO3 site** This post is part of our TYPO3 Version 11 Series. We’re shining a spotlight on some of the really useful features in version 11 and why you should upgrade. - [Link Sharing in TYPO3 v11](https://b13.com/knowledge/link-sharing-in-typo3-v11) - [Direct Downloads of Assets and Media](https://b13.com/knowledge/direct-downloads-assets-and-media) - [New CLI commands and better automation for Continuous Integration](https://b13.com/knowledge/new-cli-commands-better-automation-for-continuous-integration) - [Resizable Navigation Area in TYPO3](https://b13.com/knowledge/resizable-navigation-area-in-typo3) - **[Multi-factor authentication ](https://b13.com/knowledge/multi-factor-authentication-in-typo3-11)** - [Search & Filter for Folders and Assets](https://b13.com/knowledge/search-filter-for-folders-and-assets) - [Limit allowed attempts for logins in TYPO3 v11 ](https://b13.com/knowledge/limit-allowed-attempts-for-logins-in-typo3-v11) - [Show Columns Selector in List View and File List View](https://b13.com/knowledge/show-columns-selector-in-list-view-and-file-list-view) - [Multi Record Selection](https://b13.com/knowledge/multi-record-selection) - [Keyboard Navigation for Module Menu & Context Menu](https://b13.com/knowledge/keyboard-navigation-for-module-menu-context-menu) - [Workspaces Improvements](https://b13.com/blog/workspaces-improvements) - [Consistent UX makes selecting items more intuitive](https://b13.com/knowledge/consistent-ux-makes-selecting-items-more-intuitive) - [New TCA types in TYPO3 version 11](https://b13.com/knowledge/new-tca-types-in-typo3-version-11) Security has always been a key factor for TYPO3. To improve user account security, TYPO3 v11 includes an additional security feature called multi-factor authentication (MFA). This increases security because authentication requires both a username+password combination (something a user “knows”) plus an additional factor (something a user “owns”), for example, a time-based password or a security key. MFA has been integrated independent of the already existing “Authentication Services”. Therefore, already existing authentication mechanisms, such as LDAP or OAuth2, behave as before but can additionally be enhanced by activating MFA. ### Usability New security features often lead to a deteriorated user experience, because they require you to perform more tasks. It impacts your daily workflow, adding time and aggravation. To reduce this impact, MFA is implemented as a single step in the authentication process. Depending on the selected method, for example, security keys (currently only available as a TYPO3 extension), no additional clicks are necessary. The same goes for setting up MFA. In case a user is required to use MFA, which can be configured by an administrator, a straightforward setup process is initiated as soon as the user tries to log into the backend. Depending on the selected method, setting up MFA can then be done with one to two clicks. ### API for Extension Developers Extension developers can implement custom MFA providers. A single PHP class handles the different tasks, such as activating the provider or verifying the authentication request. Registration is done via the service configuration (which was implemented in TYPO3 v10). You can add custom providers, or use them to replace the built-in providers. ### Configuring MFA on your site To tailor MFA to installation-dependant needs, administrators are equipped with a couple of configuration options, such as: - Defining a recommended provider for specific users and user groups. - Managing allowed providers for specific users and user groups. - Enforcing MFA for specific users and user groups. ### Managing MFA Supporting administrators in managing their installation has always been top-of-mind for TYPO3, and was no exception when implementing MFA. Several backend modules have been enhanced to report users‘ MFA status. It’s also possible for administrators to manage the providers a user has activated in the corresponding user record. This is especially useful in case a user has locked a provider, due to submitting incorrect credentials multiple times. ### What’s next? In future TYPO3 versions, MFA will be available for frontend logins, too. Additionally, TYPO3 will also increase the number of built-in MFA providers. The focus is on the [Webauthn standard](https://webauthn.guide/), which allows usage of security keys and “built-in authenticators” (for example, TouchID on Apple MacBooks). ### Increase your security now Want to improve the security of your TYPO3 instance? Upgrade now to v11 or get in touch with us if you need help implementing MFA on your site. We’re here to offer professional support with your upgrades to TYPO3 v11, or any topics regarding your TYPO3 projects ----------------------------------------------------------------------------------------------------------------------- [ Let´s connect! ](https://b13.com/lets-connect) ### Written by: ![Bild von Oliver Bartsch](https://b13.com/fileadmin/_processed_/8/5/csm_oli_91751adb73.webp) Oli is a TYPO3 Core developer who loves to collaborate with teammates on new TYPO3 features and bug fixes. His essential tool: PHPStorm. Oliver Bartsch Development [ more from Oliver Bartsch ](https://b13.com/team/oliver-bartsch) Related Articles ------------------ - ![A laptop is surrounded by multiple syringes, with a red prohibition symbol displayed on the screen, indicating a message against vaccination or medical intervention.](https://b13.com/fileadmin/_processed_/f/0/csm_CrossSiteScriptingInjections_Headerbild_22d802965f.webp) ### Using the power of your CMS to block Cross-Site-Scripting injections 06 May 2025 | Benni Mack In our previous blog post, we’ve touched on most elements of Content Security Policy (CSP) to mitigate any kind of injection via Cross-Site-Scripting. Now, let’s dive into the… [ Read more: Using the power of your CMS to block Cross-Site-Scripting injections ](https://b13.com/knowledge/block-cross-site-scripting-injections-with-typo3) - ![A laptop with a yellow padlock on the screen, set against a background of repeating key icons.](https://b13.com/fileadmin/_processed_/d/3/csm_ContentSecurityPolicy_Headerbild_03b84fee88.webp) ### Introduction to Content-Security-Policy (CSP) 23 January 2024 | Benni Mack Find out how Content Security Policy can protect your websites from malicious attacks. Cross-Site Scripting exploits vulnerabilities in CMS architecture—but with the right security… [ Read more: Introduction to Content-Security-Policy (CSP) ](https://b13.com/knowledge/introduction-to-content-security-policy-csp) - ![A stylized graphic featuring a house with three horizontal bars representing data storage, a padlock symbolizing security, and a key. Background elements include leaves and abstract shapes, suggesting a digital or cloud-based theme.](https://b13.com/fileadmin/_processed_/2/5/csm_on-prem_e9249f94ba.webp) ### Why choose On-Prem over SaaS for your CMS? 14 February 2023 | David Steeb Enterprises now have many software delivery channel options to choose from. With software-as-a-service (SaaS) and cloud-based implementation models on the rise, you might be trying… [ Read more: Why choose On-Prem over SaaS for your CMS? ](https://b13.com/knowledge/why-choose-on-prem-over-saas-for-your-cms-in-2022) - ![Abstract digital illustration featuring a globe, checkmark, text boxes, and an upward arrow, all in shades of orange and purple against a dark background, symbolizing connectivity and digital communication.](https://b13.com/fileadmin/_processed_/9/6/csm_TCA_210aaa1522.webp) ### New TCA types in TYPO3 version 11 23 January 2023 | Oliver Bartsch In previous installments of our TYPO3 v11 series, we covered some of the great UX improvements that are making editors‘ lives easier. In this final post of the series, we’ve got… [ Read more: New TCA types in TYPO3 version 11 ](https://b13.com/knowledge/new-tca-types-in-typo3-version-11) - ![Abstract graphic featuring various user interface elements, including lists, checkboxes, and icons representing links and actions, set against a gradient background of orange and green.](https://b13.com/fileadmin/_processed_/d/7/csm_trees_dc53e5b2cd.webp) ### Consistent UX makes selecting items more intuitive 20 July 2022 | Benni Mack Previously in this series, we covered the improvements TYPO3 v11 brought to the Page Tree in the post, Resizable Navigation Area in TYPO3. There is one feature in particular that… [ Read more: Consistent UX makes selecting items more intuitive ](https://b13.com/knowledge/consistent-ux-makes-selecting-items-more-intuitive) - ![A computer monitor displays a starburst design, surrounded by stylized plants and a desk lamp, all set against a warm, gradient background with abstract shapes.](https://b13.com/fileadmin/_processed_/d/e/csm_workspaces_4bcc71e65c.webp) ### Workspaces Improvements 01 July 2022 | Benni Mack One of TYPO3’s powerful features for content publishing is Workspaces—creating and staging in a draft environment before publishing content. TYPO3 v11 adds a few important touches… [ Read more: Workspaces Improvements ](https://b13.com/knowledge/workspaces-improvements) - ![Hands typing on a keyboard with a cup of coffee nearby, set against a dark background featuring abstract arrows and circles.](https://b13.com/fileadmin/_processed_/3/c/csm_keyboard-navigation_927f44c459.webp) ### Keyboard Navigation for Module Menu & Context Menu 28 June 2022 | Oliver Bartsch TYPO3 version 11 supports keyboard navigation as suggested by the ARIA Authoring Practices. Users don’t need a mouse to navigate menus, trees, and to select multiple records. This… [ Read more: Keyboard Navigation for Module Menu & Context Menu ](https://b13.com/knowledge/keyboard-navigation-for-module-menu-context-menu) - ![A pencil and several checkboxes with checkmarks are depicted against a colorful abstract background featuring gears and circular shapes.](https://b13.com/fileadmin/_processed_/c/f/csm_multi-select_fa4f2e9ee4.webp) ### Multi Record Selection 25 May 2022 | Oliver Bartsch Working with multiple records just got easier. Copy, edit and delete multiple files at once with this improved feature in v11. [ Read more: Multi Record Selection ](https://b13.com/knowledge/multi-record-selection) - ![A vibrant graphic featuring a large orange spreadsheet with rows and columns, accompanied by yellow gears, an arrow cursor, and two icons resembling eyes and a smiley face, set against a dark green background.](https://b13.com/fileadmin/_processed_/0/e/csm_show-columns_d65a53551a.webp) ### Show Columns Selector in List View and File List View 15 March 2022 | Oliver Bartsch We show you how to use the new Show Columns Selector in TYPO3 v11 so you can manage large sites with hundreds of pages, records and assets with ease. [ Read more: Show Columns Selector in List View and File List View ](https://b13.com/knowledge/show-columns-selector-in-list-view-and-file-list-view) - ![Limited logins](https://b13.com/fileadmin/_processed_/f/8/csm_limited-logins_956aa4fe7a.webp) ### Limit allowed attempts for logins in TYPO3 v11 25 February 2022 | Benni Mack We talk about the rate limiting feature in TYPO3 v11 and the flexibility it offers for configuring backend login restrictions. [ Read more: Limit allowed attempts for logins in TYPO3 v11 ](https://b13.com/knowledge/limit-allowed-attempts-for-logins-in-typo3-v11)