Two-factor Authentication for RISE CRM

Description

Two-Factor Authentication for RISE CRM

Two-Factor Authentication (2FA) for RISE CRM adds a secure second step to your users’ sign-in flow—reducing account takeovers, stopping credential stuffing, and helping your team meet security and compliance expectations. Designed specifically for RISE CRM (PHP), this add-on is easy to install, simple to manage, and flexible enough for agencies, SaaS teams, and enterprises.

Feature Highlights

• 🔐 TOTP Authenticator Support: Works with time-based one-time passwords (e.g., Google Authenticator, Microsoft Authenticator, Authy).
• ✉️ Email OTP Codes: Send one-time codes to the user’s verified email as a fallback or primary 2FA method.
• 📱 Optional SMS Codes: Support for common SMS gateways (e.g., Twilio-style integrations) when enabled in your server/app settings.
• 🧑‍💻 Per-User & Role-Based Policies: Enforce 2FA org-wide, by role (admins, staff), or let users opt-in.
• 🔁 Backup Codes & Recovery: Generate printable single-use recovery codes to prevent lockouts.
• 🧭 Admin Dashboard: Centralized controls to view 2FA status, reset devices, export logs, and configure policies.
• ⚙️ Secure, Lightweight, Native: No heavy framework—follows RISE conventions for smooth updates and performance.
• 🧩 Developer-Friendly: Clean, documented hooks and views for custom flows and gateways.

Detailed Overview

Passwords alone are no longer enough. With Two-Factor Authentication for RISE CRM, every login can require a short-lived code from an authenticator app or a secure OTP sent via email/SMS. Admins decide who must use 2FA, how it’s delivered, and which recovery options are allowed. Users enroll in minutes by scanning a QR code from their profile and confirming a one-time code. The module is optimized for production use—minimal friction for users, maximal protection for your CRM data.

Comparison Table

Feature	RISE 2FA Add-on	Password-Only Login / Generic Scripts
TOTP (App-Based) Codes	✅ Native enrollment with QR & time-based codes	❌ Not available / manual hacks
Email & Optional SMS OTP	✅ Built-in flows with gateway hooks	❌ Extra development required
Role-Based Enforcement	✅ Enforce for admins/staff/clients selectively	❌ One-size-fits-all or none
Recovery & Backup Codes	✅ Admin reset + single-use codes	❌ Easily locks out users
Update Compatibility	✅ Follows RISE architecture; lightweight	❌ Breaks on updates / overrides core
Total Cost of Ownership	✅ One-time GPL with lifetime updates	❌ Ongoing subscriptions or hidden dev costs

Installation Guide

1. Download the Two-Factor Authentication for RISE CRM package from your wpshop.net account.
2. Unzip locally. Upload the module folder to your RISE modules/ (or the documented add-ons directory) on your server.
3. Log in as an Admin → go to Settings > Modules (or Add-ons) → Enable the “Two-Factor Authentication” module.
4. Open Settings > Security / 2FA:
   • Choose allowed methods: TOTP, Email OTP, and/or SMS OTP.
   • Set enforcement policy: Required for Admins, Required for Staff, Optional for Clients, etc.
   • If using SMS, enter your gateway credentials (API key, sender ID) per your provider.
5. Save changes. Test with a non-admin account to confirm the 2FA prompt and code delivery.
6. Notify users: They can enroll from My Profile > Security by scanning the QR code in an authenticator app and confirming their code.

Licensing Information

Distributed under the GPL (General Public License) in the wpshop.net GPL product style. You may use, modify, and deploy on unlimited client and personal projects. Purchases include lifetime free updates and limited support via email for installation and basic configuration.

FAQs

Which authenticator apps are supported?

Any TOTP-compatible app such as Google Authenticator, Microsoft Authenticator, or Authy.

Can I enforce 2FA for only admins and staff?

Yes. Use role-based enforcement to require 2FA for specific roles while keeping it optional for others.

Does it support SMS codes?

Yes, if you configure a compatible SMS gateway (e.g., providers with REST APIs). Email OTP and TOTP are available out of the box.

What if a user loses their phone?

Admins can reset 2FA for that user, and users can redeem pre-generated backup codes to regain access.

Will updates to RISE break the add-on?

The add-on follows RISE module conventions to remain update-friendly. Always back up and test on staging before major upgrades.

Why Choose Two-Factor Authentication for RISE CRM?

This add-on delivers the security features modern teams expect—without slowing down your workflow. From TOTP support and email/SMS OTPs to role-based enforcement and recovery options, it equips your RISE instance with enterprise-grade protections in a lightweight, maintainable package.

Secure your CRM today. Add Two-Factor Authentication to RISE CRM from wpshop.net—enjoy GPL freedom, lifetime free updates, and limited email support to get up and running fast.