@nauth-toolkit/mfa-totp

TOTP authenticator app MFA provider for nauth-toolkit.

Adds time-based one-time password (TOTP) support — works with Google Authenticator, Authy, 1Password, and any TOTP-compatible app. Handles secret generation, QR code provisioning URIs, and code verification.

Documentation · GitHub

Part of nauth-toolkit. Requires @nauth-toolkit/core.

Install

npm install @nauth-toolkit/mfa-totp

Enable in your auth config:

import { MFAMethod } from '@nauth-toolkit/core';

const authConfig = {
  mfa: {
    enabled: true,
    allowedMethods: [MFAMethod.TOTP],
  },
};

NestJS — import the module and it auto-registers:

import { TOTPMFAModule } from '@nauth-toolkit/mfa-totp/nestjs';

@Module({
  imports: [NAuthModule.forRoot(authConfig), TOTPMFAModule],
})
export class AuthModule {}

Related packages

| Package | Purpose | | --- | --- | | @nauth-toolkit/mfa-sms | SMS verification codes | | @nauth-toolkit/mfa-email | Email verification codes | | @nauth-toolkit/mfa-passkey | WebAuthn / passkeys |

See the full package list in the core README.

Free to use. See license.