Two-Factor Authentication in Krayin CRM

Your CRM contains some of your most valuable business information—from leads and quotes to customer details, conversations, and complete customer history. Protecting this information starts with securing the accounts that have access to it.

A strong password is important, but it shouldn’t be the only security layer protecting your CRM.

Two-Factor Authentication (2FA) in Krayin CRM adds an extra layer of protection to the admin panel. With the Google2FA module, users can verify their identity using a time-based one-time password (TOTP) generated by an authenticator app. Recovery codes are also available as a backup authentication method.

In this guide, we’ll explore why 2FA is important for CRM security, what the Google2FA module provides, and how to enable and use it in your Krayin CRM installation.

How Two-Factor Authentication in Krayin CRM Works

The Google2FA module adds Google Authenticator-compatible, time-based one-time password (TOTP) authentication to the Krayin CRM admin panel.

The module focuses on two important security actions:

• Admin login verification
• Password change verification

Once a user pairs their Krayin CRM account with an authenticator application, the application generates a new verification code periodically. The user enters this code when Krayin CRM requests additional authentication.

The module works with commonly used authenticator applications, including:

• Google Authenticator
• Microsoft Authenticator
• Authy
• Microsoft Authenticator
• 1Password

Installation

• Unzip and Merge Files
  Extract the Google2FA extension ZIP file and merge the packages folder into the root directory of your Krayin CRM project.
• Install Dependencies
  Open your terminal, navigate to the project root, and run the following command:

composer require pragmarx/google2fa:^8.0 bacon/bacon-qr-code:^3.0

• Update composer.json
  Open the composer.json file and add the following entry under the autoload → psr-4 section:

"Webkul\\Google2FA\\": "packages/Webkul/Google2FA/src"

• Update bootstrap/providers.php
  Open the bootstrap/providers.php file and add the following service provider:

use Webkul\Google2FA\Providers\Google2FAServiceProvider;


Google2FAServiceProvider::class,

• Update Composer Autoload
  From the project root, run:

composer dump-autoload

• Install the Google2FA Module
• Run the following command to install the required Google2FA dependencies:

php artisan google2fa:install

Enable Two-Factor Authentication in Krayin CRM

Two-factor authentication can be enabled for the entire CRM from the Google2FA configuration page.

From the Krayin CRM admin panel, navigate to:

Configure → Security → Google2FA

You’ll find the following settings:

Enable

The Enable option activates two-factor authentication functionality in Krayin CRM.

Enforce

The Enforce option makes 2FA mandatory for users.

When enforcement is enabled, users who haven’t configured 2FA are required to complete the setup before they can continue using the CRM.

Allow User Management

The Allow User Management option allows users to manage their own two-factor authentication settings, including disabling or reissuing their 2FA configuration.

After configuring the required settings, click Save Configuration.

Set Up 2FA for Your Krayin CRM Account

Once 2FA is enabled, users can configure two-factor authentication directly during the login process.

Follow these steps:

1. Enter Login Credentials
   Enter your email address and password on the Krayin CRM login page.
2. Open the 2FA Setup Screen
   If 2FA has not been configured for your account, Krayin CRM will display the Set Up Two-Factor Authentication screen after successful login.
3. Scan the QR Code
   Open your preferred authenticator application and scan the QR code displayed on the screen.
4. Enter the Setup Key Manually
   If you cannot scan the QR code, you can enter the setup key manually in your authenticator application.
5. Enter the Verification Code
   Enter the six-digit verification code generated by your authenticator application.
6. Verify and Enable 2FA
   Click Verify & Enable to complete the setup.
7. Skip 2FA Setup (Optional)
   If 2FA enforcement is disabled, users can click Skip to continue without setting up 2FA.

Once verification is successful, two-factor authentication will be enabled for your account.

The QR code and setup key are generated by your Krayin CRM installation, allowing the account to be paired directly with your authenticator application.

Save Your Recovery Codes

After successfully setting up 2FA, Krayin CRM provides eight one-time recovery codes.

These codes can be used instead of an authenticator code if you lose access to the device containing your authenticator application.

Each recovery code can only be used once.

How to Store Recovery Codes Safely

Recovery codes should be treated as sensitive backup credentials.

After they are generated, you can:

• Copy all recovery codes
• Download them as a .txt file
• Store them securely in a password manager or another trusted location

The recovery codes are displayed only once, so make sure you save them before leaving the page.

Sign In to Krayin CRM With 2FA

After 2FA has been enabled, signing in requires one additional verification step.

Enter your email address and password as usual. After your credentials are accepted, Krayin CRM will display the two-factor authentication challenge.

Enter the current six-digit code generated by your authenticator application and click Verify.

If you don’t have access to your authenticator application, select:

Use a recovery code instead

and enter one of your unused recovery codes.

This additional step helps protect the account even if the user’s password has been compromised.

Protect Password Changes With 2FA

Two-factor authentication doesn’t only protect the login process. The Google2FA module also adds an additional verification step when an enrolled user changes their password.

Navigate to:

My Account → Change Password

Enter your:

• Current Password
• New Password
• Confirm Password

When 2FA protection is enabled for password changes, Krayin CRM will request the current authenticator code before saving the new password.

Enter the six-digit code generated by your authenticator application and complete the password change.

This helps prevent unauthorized users from changing an account password if they gain access to an active session.

Manage Two-Factor Authentication

After enabling 2FA from the Admin Configuration, a Google2FA menu will appear in the left sidebar of the Krayin CRM admin panel.

From the Google2FA section, administrators can monitor users’ 2FA information, including:

• Username
• Email
• 2FA Status
• Last 2FA Login Time

This provides administrators with a centralized view to monitor the 2FA status and login activity of users.

Who Should Use Two-Factor Authentication?

2FA is particularly useful for organizations that store sensitive information in their CRM.

It can provide additional protection for:

Teams Handling Sensitive Customer Data

Businesses that manage confidential customer, financial, legal, healthcare, or sales information can benefit from an additional authentication layer.

Remote and Distributed Teams

Teams accessing the CRM from different networks and devices can use 2FA to add another layer of account protection.

CRM Administrators

Administrators can use the Enforce option to require users across the organization to configure 2FA.

Users With Valuable CRM Access

Any user with access to sensitive customer or business information can benefit from two-factor authentication.

What Does the Google2FA Module Protect?

The Google2FA module is designed around specific CRM authentication flows.

It provides:

• TOTP-based admin login verification
• Password change protection
• One-time recovery codes
• 2FA enforcement
• User-level 2FA management

The module does not modify other authentication or application flows such as storefront access, API/Sanctum tokens, OAuth login, password-reset emails, email verification, or registration.

Keeping the scope focused makes the module easier to configure and manage.

Register the required service providers according to the module’s installation instructions.

After completing the installation, navigate to:

Configure → Security → Google2FA

and enable the module.

Best Practices for Using 2FA

Enabling two-factor authentication is an important security step, but users should also follow basic security practices.

Use a Strong, Unique Password

2FA should complement a strong password rather than replace good password security practices.

Protect Your Authenticator Device

Keep your phone and authenticator application protected using the security controls available on your device.

Store Recovery Codes Securely

Keep recovery codes in a trusted password manager or another secure location.

Never Share Authentication Codes

Never share your TOTP or recovery codes with another person.

Enable 2FA for Relevant Users

Organizations should consider enabling or enforcing 2FA for administrators and users who have access to sensitive CRM information.

Frequently Asked Questions

Which authenticator apps are supported?

The module works with standard RFC 6238 TOTP-compatible authenticator applications, including Google Authenticator, Authy, Microsoft Authenticator, and 1Password.

What happens if I lose my authenticator device?

You can use one of your unused recovery codes to authenticate.

If both the authenticator device and recovery codes are unavailable, another administrator can remove the user’s 2FA configuration so the user can configure 2FA again.

Can I make 2FA mandatory for all users?

Yes. Enable the Enforce option under:

Configure → Security → Google2FA

Users who haven’t configured 2FA will then be required to complete the setup before continuing to use the CRM.

Conclusion

Your CRM contains critical customer and business information, making account security an important part of protecting your organization.

Two-Factor Authentication in Krayin CRM adds an additional layer of security by requiring a time-based authentication code in addition to the user’s password.

With the Google2FA module, Krayin CRM can protect admin logins, secure password changes, provide one-time recovery codes, and allow administrators to enforce 2FA across their team.

Whether you’re managing a small sales team or a large CRM deployment, enabling two-factor authentication is a practical step toward a more secure Krayin CRM environment.

Hope this is helpful for you. If you have any issues, feel free to raise a ticket at https://webkul.uvdesk.com/en/.