two factor authentication (TFA) implementation

two factor authentication (TFA) implementation

A great pattern that we are seeing for implementing two-factor authentication is to use the TOTP (Time-based One-time Password Algorithm) standard for the second authentication step. What is so cool about TOTP is that it is flexible enough to allow your users to generate their authentication tokens directly on their smart phones using a TOTP app like Google Authenticator or have their tokens sent to their mobile phone via SMS.

Twillio - send SMS cell phone message, voice message and Authentication API for every application

https://www.twilio.com/

GAuthify -Google® Authenticator, SMS, Voice, and Email Two-Factor Authentication in 5 minutes.

https://www.gauthify.com/

Reference:

https://www.twilio.com/blog/2013/04/add-two-factor-authentication-to-your-website-with-google-authenticator-and-twilio-sms.html

https://en.wikipedia.org/wiki/Time-based_One-time_Password_Algorithm#Client_Implementations

https://blog.gopheracademy.com/advent-2013/day-21-two-factor-auth/