Magento 2 Two Factor AuthenticationMagento 2 Two Factor Authentication
Live Demo
Buy Now
Support
Live Demo
Buy Now
Support
  • Getting Started

    • Introduction
    • Requirements
    • Installation
  • Third-Party Setup

    • Twilio Setup
    • Firebase Setup
  • Configuration

    • Admin Configuration
    • i18n Translation
  • Authentication Channels

    • SMS Authentication
    • Email OTP
    • Email Verification Link
    • Push Notification
    • TOTP Authenticator App
  • Security & Recovery

    • Backup Recovery Codes
    • Brute-Force & Lockout
    • Admin Management & Unlock
  • Help

    • Troubleshooting
    • FAQ & Support

Browser Web Push Notification (Firebase FCM)

Browser push notifications deliver real-time 2FA codes directly to shoppers' desktop and mobile browsers via Google Firebase Cloud Messaging (FCM).


Configuration

In Stores > Configuration > Webkul > Two Factor Auth:

  • Set Send Otp Via to Push Notification.
  • Enter your Firebase Web API Key, Project ID, Sender ID, App ID, VAPID Public Key, and upload your Service Account JSON file.

Firebase Admin Configuration


Workflow 1: New Customer Registration

  1. The customer enters their registration details on the storefront.

Customer Registration

  1. The browser presents the native permission prompt asking the customer to allow notifications for your store domain. The customer clicks Allow.

Allow Push Notifications

  1. A push notification with the dynamic auth code is triggered immediately on the customer's desktop or mobile screen.
  2. The customer enters the auth code into the on-screen 2FA popup.

Push Notification OTP Prompt

  1. Upon validation, account creation is completed.

Workflow 2: Existing Customer Login

  1. The customer enters their email address and password on the sign-in page.

Customer Login Form

  1. A push notification pop-up appears in the customer's browser containing the one-time authentication code.

Push Notification Popup

  1. The customer types or pastes the received code into the login 2FA modal to access their account.
Prev
Email Verification Link
Next
TOTP Authenticator App