Two-Factor Authentication System

Description

This project implements a simple two-factor authentication (2FA) system using QR codes compatible with Google Authenticator and JWT (JavaScript Web Token) for secure user authentication.

Objective

• Develop a 2FA login system with encrypted passwords stored in the database.
• Demonstrate the use of JWT for managing user authentication data.

Tools and Technologies

• PHP for backend logic.
• MySQL for database management.
• endroid/qr-code package for QR code generation.
• firebase/jwt for JWT generation and validation.
• Tailwind CSS and daisyUI for a user-friendly interface.

Key Features

• Secure 2FA with QR codes.
• Encrypted passwords and salting for data security.
• JWT for secure session handling.
• User-friendly UI design.

Key Takeaways

• Data Security: Implementing salted hashed passwords ensures user data safety.
• Identity Management: TOTP codes add an extra layer of security with 2FA.
• Risk Minimization: TOTP codes prevent phishing and brute-force attacks.
• Scalability: The system is designed to be flexible and scalable for future needs.