This page introduces the usage of DUOSecurity. Remember that a 2 factor solution is one of the most efficient way to protect your data inside Teampass. I recommand to use this solution.

About DUOSecurity

DUOSecurity is a 2 factor authentication tool securizing any kind of tool requiring a usser authentication. It protects every account with ease.

For complete description, you should switch to website.

How does it work with Teampass?

Once enabled, this feature will require you to synchronize the accounts in Teampass and DUOSecurity. Each Teampass user login needs to have a similar input inside DUOSecurity.

When a Teampass user will require an access to Teampass, DUOSecurity will check if he/she is allowed to access and he/she will need to confirm the access through a dedicated and personal device (check the authentication methods). If DUOSecurity confirms the legitimity of the user, then Teampass will allow the user to get connected.

Define a specific application for your Teampass instance

This chapter describes how to create the DUOSecurity application for your Teampass instance.

  • Get connected to your DUOSecurity dashboard
  • Select Applications in the menu
  • Click button Protect an Application
  • In the list, select Web SDK and click Protect this application
  • Give a name to this application (example: Teampass)
  • The next settings could be selected:
    • Username normalization set to none
    • New user policy set to Require Enrollment
  • Click button Save changes

Store the IKEY, SKEY and Host. You will need them in Teampass.

Create the users

Inside the Users menu, create a new user for each user you have in Teampass.

You must ensure that the speling is exactly similar.

## Enable DUOSecurity in Teampass

  • Login in Teampass with an Administrator account.
  • Open Settings page
  • Select tab 2FA options
  • Enable DuoSecurity by selecting option Yes
  • Generate a random key for AKEY
  • Fill in IKEY, SKEY and HOST with the credentials from the application you previously created in DUOSecurity dashboard.
  • Click button Save data in sk.php file

Now your users will have to connect by indicating their login and password, and through DUOSecurity (and especially DuoPush feature) to get authenticated in Teampass.

Notice that this feature is available since release 2.1.24.