mfa

Implement TOTP, WebAuthn/Passkey, and recovery code MFA flows.

Updated Feb 26, 2026
One-click install
npx skills add https://github.com/engineers-hub-ltd-in-house-project/eh-skills --skill mfa
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: mfa
Source: https://github.com/engineers-hub-ltd-in-house-project/eh-skills/tree/main/skills/authentication/mfa
Command: npx skills add https://github.com/engineers-hub-ltd-in-house-project/eh-skills --skill mfa

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

This Skill enhances account security by implementing multi-factor authentication (MFA), significantly reducing the risk of unauthorized access and account takeovers.

Core Features & Use Cases

  • TOTP Implementation: Supports Time-based One-Time Passwords (e.g., Google Authenticator).
  • WebAuthn/Passkeys: Enables passwordless authentication using modern standards.
  • Recovery Codes: Provides backup methods for account recovery.
  • Use Case: Integrate TOTP or WebAuthn into your login flow to add a critical layer of security beyond just a password, protecting sensitive user data.

Quick Start

Initiate the setup process for TOTP-based multi-factor authentication for the current user.

Frequently Asked Questions about mfa

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I implement TOTP for multi-factor authentication in my web app?

You can set up multi-factor authentication by initiating the TOTP setup process for the current user. This enables Time-based One-Time Password generation and verification alongside standard login credentials.

What is WebAuthn passkey authentication and how does it secure user logins?

WebAuthn passkey authentication enables passwordless login using modern security standards. It secures user logins by requiring a cryptographic second verification factor, significantly reducing unauthorized access and account takeovers.

How do I generate and manage recovery codes for MFA locked accounts?

Managing MFA recovery codes involves providing backup methods for account recovery when users lose access to their primary second factor. This ensures users can regain access to secure accounts without compromising overall security.

Does this multi-factor authentication Skill support both TOTP and WebAuthn?

Yes, this multi-factor authentication Skill supports both TOTP and WebAuthn/Passkey registration and authentication. It covers Time-based One-Time Password generation alongside passwordless login standards.

When should I use WebAuthn passkeys instead of TOTP for secure account access?

Use WebAuthn passkeys instead of TOTP when you want to enable passwordless authentication using modern standards. TOTP remains effective for standard authenticator app verification depending on your security requirements.