payload-totp

Add TOTP-based two-factor authentication as an extra security layer to Payload CMS.

114 Mar 18, 2026

Overview

Adds Time-based One-time Password (TOTP) security layer to Payload CMS. Users configure an authenticator app (Google Authenticator, Authy, Microsoft Authenticator) for verification. Features optional or forced TOTP setup, configurable TOTP algorithm/digits/period, i18n support, dark/light theme support, and API key auth compatibility.