MFA and Password Security Compatibility
auth_totp and password_security compatibility
auto_awesome What this module does
AI-generated from the code · Odoo 12.0Automatically installed bridge that makes the two-factor authentication module and the password security module work together, forcing users with an expired password to set a new one right after they pass the MFA step.
This is a hidden, automatically installed compatibility module. It does not add any new menu, screen or field; it only changes the behaviour of the two-factor authentication login flow when the password security module is also installed.
What changes for users: - When someone logs in with a username, password and their MFA/one-time code, Odoo first completes the normal MFA check. - If the login is successful but the user's password has expired, Odoo immediately expires the password, logs the user out of the session and redirects them to the sign-up page so they can choose a new password. - If the password is still valid, the login continues normally with no extra step.
This closes a gap where a user could otherwise pass MFA and keep using an expired password. The check is done on the server side after the MFA post request, so it applies to every user going through the MFA login route.
The module touches the authentication controller of auth_totp and relies on the password expiry logic provided by password_security. No new models, menus or reports are created.
Depends on
Text generated by AI (DeepSeek) from reading the Odoo 12.0 code on GitHub; it may contain mistakes, so check the code before deciding. View the code on GitHub
Availability by version
Reviewed: 2026-11-03Confirmation status: 1 confirmed, 8 with no information of 9 versions.
Sources · Odoo 12.0
Confirmed on 2026-11-03 in branch 12.0 of OCA/server-auth.
terminal Installation and usage
No verified informationInstallation instructions, the distribution package, dependencies and configuration steps are not shown because they have not yet been verified in the module documentation for any version.
Data imported from GitHub: this sheet reflects the latest catalog review, not a live lookup. Always check the module documentation and staging before installing in production.