Add a two-factor authentication to the MODX manager. Secure the front end login with a pre-hook for the "Login" extra. Generate a QR Code for saving the authenticator secret with a snippet in the frontend.
MODX Package Management
Install via package manager. After you have saved the two-factor secret shown in the TwoFactorX tab when you edit your manager user, you can enable the system setting twofactorx.enable_2fa. When the system setting enable_onetime is enabled, a manager user can log in once without two-factor authentication.
The project is licensed under the GPLv2 license.
Translations of the package can be made for the Default Lexicon, the Email Lexicon, the Properties Lexicon, the Permissions Lexicon and the System Setting Lexicon