Two Factor Authentication in Nextcloud

[ncpbot]

In Nextcloud, there is the option to set up Two Factor Authentication. We will focus on TOTP, which are time-based codes that expire every 30 seconds. The steps you have to follow are the following:

Getting Started

1. Admin User Install TOTP app on Nextcloud under $URL/settings/apps/security
2. Users may now Enable TOTP under $URL/settings/user/security, under TOTP second-factor auth section.
   • Your QR code will show up once. Do not lose it!
3. Install a Two Factor tool on your mobile device or computer for the QR Code.
   • andOTP - Android app from F-droid & Google Playstore
   • Keepass - available for KeepassDX from F-Droid & Google Play for Android, iOS, Windows, Linux, MacOS

andOTP for Two Factor

4. Scan the QR code that is shown in step 2 with andOTP.
5. andOTP and Nextcloud are merged and now every 30 seconds a new TOTP password is generated.

Now when you log in you will be prompted, in a second step, to type a TOTP password. Type the password shown in the andOTP app.

LoginFlow

Nextcloud supports LoginFlow, which means you can allow access using your mobile or desktop or web app, which you’ve already authorized in order to authorize other accounts and devices on the same machine.

App Passwords (in case you cannot use LoginFlow)

You can generate App Passwords for every device or application that needs access to your Nextcloud account, e.g. Nextcloud Desktop or Mobile Client, DavDroid, Notes (Mobile), GNOME Accounts, etc.

To add an Device or Application password,

1. Under Settings select Security and scroll down to Devices & sessions
2. Fill in the App name with a suitable name for the device or application.
3. Click Create a new app password

An App Password is generated and displayed in a gray box. Provide this password along with your username on the device or application. After you log in, click Done.

Note: After you click Done, the password will never be revealed again. You may want to use a password manager to save this password, or create a new App Password every time you loose a password.

Two factor authentication with Telegram

How to in NC admin doc

About the Author

This article was worked on by @ZendaiOwl and @just. Thank you so much for all you do! You may write your own articles by joining our wiki and documentation team on the forum.