Security · Question 6 of 12
Which multi-factor authentication (MFA) methods does the TYPO3 Core ship with?
2 answers are correct. Easy
Show answer
Answer
- B Recovery codes as a fallback access
- D Time-based one-time passwords (TOTP) from an authenticator app
Explanation
With MFA, a stolen password alone is no longer enough to log in to the backend. The core contains two providers: TOTP, where an app such as Google Authenticator or 1Password generates a six-digit code every 30 seconds, and recovery codes, which can only be activated in addition to another provider and serve as emergency access if the phone gets lost. Setup is done in the user settings; administrators can also make MFA mandatory. SMS or e-mail methods are not part of the core; further providers such as WebAuthn are only available through extensions.