This WHMCS security module enables Two-Factor Authentication (2FA) for administrators using Unecast.
It supports SMS and Email as delivery methods for OTPs (One-Time Passwords).
- Upload the Unecast Two-Factor Authentication Addon to:
/modules/security/
- Navigate to Setup → Staff Management → Two-Factor Authentication.
- Select Unecast and click Configure.
- Enter the following:
- Admin Mobile Phone (e.g.,
947XXXXXXXX) - API Key (provided by Unecast)
- Enable/disable SMS or Email as needed.
- Admin Mobile Phone (e.g.,
- Click Save.
- Sends OTP to the admin’s registered mobile number.
- Supports Email delivery as a fallback or alternative.
- Mobile number is securely stored in
tbladmins.authdata(JSON format). - Compatible with WHMCS 8.x+.
The admin mobile number is stored in tbladmins.authdata:
{
"admin_mobile": "94718761292",
"backupcode": "67be8c..."
}