TECNOAMBASSADOR · PRESTASHOP MODULE
Tecno Safety
Two-step verification (TOTP) for your store's back office.
|
| A password alone isn't enough: it gets leaked, guessed or stolen. Tecno Seguridad adds a second step when logging in to your back office: after entering the username and password, each employee types a 6-digit code that changes every 30 seconds from their phone app. Even if someone gets hold of a password, without the phone they can't get in. It is the same system used by banks and major platforms. |
| 🔐 Two-step verification 📲 Authenticator apps 🌎 English and Spanish |
What can you do?
|
| |
📲 Set up in a minute
- Each employee turns it on from the module's settings, under “My two-step verification”.
- They scan the QR code with an authenticator app, such as Google Authenticator, Microsoft Authenticator or Authy. If they can't scan it, they use the manual key.
- The QR is generated inside your own store: no external service is used.
- They confirm with a first code to activate it, and receive their recovery codes.
- It is optional for each employee: whoever turns it on is protected.
|
|
| |
| |
🛑 A truly protected back office
- After the password, a verification screen appears and nothing of the back office is shown until the code is entered.
- Actions launched in the background are also blocked: without verifying, nothing can be operated.
- Asks for the code again every as many hours as you choose (by default, 12) or only at login.
- Logout on inactivity: if the computer was off, asleep or unused, on return it asks for username and password again (by default, 60 minutes).
- The verification screen can't be embedded in other sites or stored in the browser's cache.
- Button to log out from the verification screen itself.
|
|
| |
| |
🧰 If you lose your phone, you don't get locked out
- 8 single-use recovery codes, shown only once on activation.
- Optional: also send them by email to the employee, in their language.
- You can generate new codes whenever you want (the previous ones stop working) or turn off your own verification, confirming with a code.
- Reset by an administrator: a SuperAdmin can remove the verification of an employee who lost their phone.
- Emergency switch: if everything fails, you create an empty file named desactivar.txt inside the module's folder, by FTP, and verification stops being required until you delete it.
|
|
| |
| |
👥 Control for administrators
- A SuperAdmin can turn on verification for another employee: the module shows the QR so the employee scans it and confirms with their first code.
- Employee list showing the verification status of each one.
- Remove an employee's verification, with a record in PrestaShop's logs.
- General settings for SuperAdmin only.
|
|
| |
| |
🔒 Protection against attempts and data theft
- Lockout after failed attempts: after 3 to 10 wrong codes (by default, 5), the employee is locked out for the time you choose (by default, 15 minutes).
- The app's code is standard (TOTP): 6 digits, changes every 30 seconds, with a small clock tolerance.
- A code that was already used can't be reused.
- The secret key is stored encrypted in the database, and recovery codes are stored as fingerprints that don't allow recovering the original code.
- The session pass is signed and tied to the employee and their password: if the password changes, verification is needed again.
- If the module had an unexpected error, it doesn't lock you out of the back office: it records it in the logs.
|
|
| |
| |
⚙️ A control panel made to fit you
- Master switch to turn the second-step requirement on or off.
- How many hours until the code is asked for again, minutes of inactivity, allowed attempts and lockout minutes.
- Option to send recovery codes by email.
- Language per employee: Auto, ES or EN. In Auto, the employee's back office language is used, also in the emails.
- Recommended values from installation.
|
|
| |
✅ Benefits
- A stolen password is no longer enough to get into your store.
- Set up in a minute, with the apps your employees already know.
- No external services or extra accounts: everything works inside your store.
- With emergency exits so you are never locked out.
|
| |
Requirements
- PrestaShop 9 (from 9.0 onward, within the 9 series). This module isn't compatible with version 1.7 or 8.
- Each employee needs an authenticator app on their phone, such as Google Authenticator, Microsoft Authenticator or Authy, and the phone's time must be correct.
- Optional: email sending enabled in PrestaShop, to receive recovery codes by email.
- Recommendation: before turning it on, save your recovery codes and test the login with a second window open.
- Important: uninstalling the module deletes the verification data of all employees.
|
