I worked on an open source CMS called Airship and we decided to include 2FA in our v1.0 release. After a bit of research (mostly to conclusively rule out SMS-ba

I worked on an open source CMS called Airship and we decided to include 2FA in our v1.0 release. After a bit of research (mostly to conclusively rule out SMS-based 2FA), I found that it was actually very easy to implement. I started working on a vendor-agnostic 2FA implementation for PHP projects. https://github.com/paragonie/multi_factor https://github.com/paragonie/multi_factor It's far from complete, but hopefully it makes it easier for others to add 2FA to their projects. If anyone's interested in the open source CMS I mentioned: https://github.com/paragonie/airship https://github.com/paragonie/airship