Ship
Two-factor authentication is live
TOTP-based 2FA for every Kumiko app — QR enrollment, recovery codes, and a login-time challenge that revokes other sessions on change. Bundled feature, no custom code.
kumiko.rocks
Multi-factor authentication ships as a bundled feature (auth-mfa) — mount it and every user gets self-service TOTP enrollment, no custom auth code.
- Enrollment: scan a QR code (or enter the secret manually), confirm with a code, get one-time recovery codes
- Login challenge: once enabled,
/auth/loginanswers with anmfa-challenge(plus a challenge token) instead of a session — the app swaps in a verify screen for the code - Session safety: enabling, disabling, or regenerating recovery codes revokes every other active session immediately
Works with any authenticator app (Google Authenticator, 1Password, Authy — anything TOTP). Full setup guide with the enrollment and verify flow: docs.kumiko.rocks/en/guides/auth-mfa-setup.