Improved Admin Security installation instructions

Thank you for downloading our magento extension. Please follow these instructions to proceed with the installation of your theme:

Turn store compilation off:

Navigate to Admin -> Tools -> Compilation and deactivate compilation mode for your store.

Copy all files into your magento directory:

Simply copy all files from "extension source x.x.x" directory into your magento store directory.

Turn your magento cache off:

Navigate to Admin -> System -> Manage Cache and deactivate cache for your store. You can enable it after extension installation will be finished.

Refresh your admin user access rights:

Simply logout from your store admin and then login back.

Next steps

  1. Before extension installation please check if your mobile device is compatible with Google Authenticator mobile application. Our Google Authenticator extension is compatible with every iOs device such as iPhone, iPad or iPod touch, Android device or BlackBerry device. In order to do that please complete next step:
    • For Android devices please open the Google Play and search for Google Authenticator application.
    • For iOs devices please visit the Apple app store and search for Google Authenticator application.
    • For BlackBerry devices please visit on your BlackBerry.
  2. Copy all files into your magento directory and turn Magento cache off.
  3. Open your admin user account settins at Admin > System > Permisions > Users > Your User > Tab "Two Factor Authentication"
  4. Scan QR code with Google Authenticator application using your smartphone.
  5. Insert into verification key field key you got on your mobile device.
  6. That's all. You just enabled protection for that admin user. Try logout and login with verification key. Please notice that key is got refreshed every 30 seconds. Please also notice that if you have not enabled protection for all some users then verification key will be ignored for that users.
#2 Uninstall/Disable:

In case you lost your smartphone or don't have access to it then you can disable extension via ftp:

  1. Please copy TM_TwoFactorAuthentication_Disable from app/code/local/TM/TwoFactorAuthentication/scripts/ to your store root directory.
  2. Rename it to TM_TwoFactorAuthentication_Disable.php.
  3. Open url http://[base store url]/TM_TwoFactorAuthentication_Disable.php
  4. Remove file TM_TwoFactorAuthentication_Disable.php in your store folder
  5. Now your can login to your store and reset or disable extension.
  6. Also protection can be disabled by renaming app/etc/modules/TM_TwoFactorAuthentication.xml to In such case extension simply will not be loaded.

If you have any problems with extension installation please contact us at and we will help you with extension installation for free

Common questions and ideas
  • 0
    A: You can use multiply ip addresses in allowed and blocked ip address.
    Posted by Peter D. on Monday, December 26, 2016

Ask Your Question

* Required Fields

Back to top