georgringer / mfa-unlock

dev-main 2026-10-18 12:44 UTC

Requires

• php: >= 8.2
• typo3/cms-backend: ^14.0 || ^15.0 || 15.0.*@dev
• typo3/cms-beuser: ^14.0 || ^15.0 || 15.0.*@dev
• typo3/cms-core: ^14.0 || ^15.0 || 15.0.*@dev

GPL-2.0-or-later

• Georg Ringer

Published on Packagist.org on 2026-10-18 12:45 UTC

README

Unlocks locked MFA providers of backend users. After too many failed attempts a provider is locked and only the user themselves can unlock it, by switching to that user. This extension lets administrators do it for others, without deleting the provider's secret.

• a new view MFA unlock in the dropdown of the backend user module, listing all users with a locked provider and an unlock button for each of them, or for all at once
• the CLI command mfa:unlock

Supports TYPO3 v14 and v15. The view is available to administrators only.

Installation

composer require georgringer/mfa-unlock

Usage

Backend

Open Admin Tools > Users and select MFA unlock in the dropdown at the top left.

CLI

List the users with a locked provider:

vendor/bin/typo3 mfa:unlock --list

Unlock a single user, by uid or by username:

vendor/bin/typo3 mfa:unlock 16
vendor/bin/typo3 mfa:unlock editor

Unlock all users:

vendor/bin/typo3 mfa:unlock --all

Exactly one of the uid or username, --all and --list has to be given. Unlocking resets the failed attempts only, users keep their configured providers.