This module adds support for FIDO U2F token based authentication. It allows users to enable/disable MFA and manage authentication apps/devices via the "Change My Preferences" view and an associated wizard. The server must run HTTPS to work properly.
After logging in, users with registered U2F devices are taken to a second screen where they have authenticate using device.
auto_awesome What this module does
AI-generated from the code · Odoo 12.0Adds two-step verification with a physical U2F security key (like a YubiKey) to Odoo logins. Users can register keys, choose a default one, and must tap it after entering their password.
This module lets users protect their Odoo account with a physical U2F security key in addition to their password. After entering their normal login details, users who have a registered key are taken to a second screen asking them to insert the key and tap its button.
Where it appears: - In the user's preferences (Change My Preferences), a button "Manage 2-step verification" opens a list of the user's U2F devices. - On the full user form, a new "U2F" page shows the user's registered devices. - The device form has a "Make default" button and a scan field that reads the key.
Business rules and automatic behaviour: - When a new device is saved, it is automatically registered and made the default device for that user. - Only one device can be the default; making a new one default clears the previous default. - During login, the system checks the default device; if the key is missing or the response is wrong, access is denied and the user is sent back to the U2F login page. - A security rule ensures users only see their own U2F devices.
The module touches res.users and adds a new u2f.device model. It requires the Python library u2flib_server and the server must run over HTTPS for the key to work.
Depends on
Models and fields (2)
- res.users · extends an existing modelu2f_device_ids (U2F devices)
- u2f.device · new modeljson (Scan), name, default, user_id
Text generated by AI (DeepSeek) from reading the Odoo 12.0 code on GitHub; it may contain mistakes, so check the code before deciding. View the code on GitHub
Availability by version
Reviewed: 2026-11-03Confirmation status: 1 confirmed, 8 with no information of 9 versions.
Sources · Odoo 12.0
Confirmed on 2026-11-03 in branch 12.0 of OCA/server-auth.
terminal Installation and usage
OCA documentation · Odoo 12.0Installation
Source · Odoo 12.0- Install the U2Flib library using pip:
pip install python-u2flib-server - Follow the standard module install process
Usage
Source · Odoo 12.0After logging in, set up a U2F device through the user preferences. Click on ‘Manage 2-step verification' and create a new device by filling a name and scanning the device.
No verified information in OCA: Configuration.
Installation instructions, the distribution package, dependencies and configuration steps are not shown because they have not yet been verified in the module documentation for any version.
Data imported from GitHub: this sheet reflects the latest catalog review, not a live lookup. Always check the module documentation and staging before installing in production.