Best practices for Two Factor Auth / 2FA in 2021?

• rotp

  6 1,566 6.1 Ruby

  Ruby One Time Password library

  Use https://github.com/mdp/rotp/ -- it's super simple to get TOTP 2FA set up. Friends don't let friends use SMS 2FA.

• devise-2fa

  1 9 0.0 Ruby

  Devise 2FA with Time Based OTP/rfc6238 tokens and encrypted secrets.

  Not sure if still maintained but there's this gem that uses rotp: https://github.com/williamatodd/devise-2fa. If anything, you can peek into how that gem is doing it and just copy that.

• WorkOS

  workos.com

  sponsored

  The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.

  

• devise-otp

  2 150 4.1 Ruby

  Two Factors authentication for Devise using Time Based OTP/rfc6238 tokens.

  I use a combination of https://github.com/wmlele/devise-otp and https://castle.io/

• authy-devise

  1 202 2.1 Ruby

  Discontinued Authy Devise plugin to add Two-Factor Authentication

  

  We've used Twilio's Authy plugin for Devise with minimal drama: https://github.com/twilio/authy-devise

• ruby-u2f

  1 258 1.9 Ruby

  U2F library in Ruby

  

  All OTP-based 2FA methods are phishable. For real security, you should be looking at FIDO (U2F or WebAuthN)

• webauthn-ruby

  5 616 5.9 Ruby

  WebAuthn ruby server library ― Make your Ruby/Rails web server become a conformant WebAuthn Relying Party

  

  All OTP-based 2FA methods are phishable. For real security, you should be looking at FIDO (U2F or WebAuthN)

Suggest a related project