PHP Business Authenticator
Secure two-factor authentication (TOTP/2FA)
Free
-
Rating
-
Installations9
-
Developer
Description
PHP Business Authenticator is a secure TOTP/2FA code manager that runs entirely inside your Bitrix24 instance. All authentication keys are stored in a Smart Process Automation (SPA) created within your own account — no external servers, no third-party databases, no telemetry.
KEY FEATURES
• Generate TOTP codes (RFC 6238) compatible with Google Authenticator, Authy, Microsoft Authenticator and any standard 2FA service
• Add accounts manually via Base32 secret OR by scanning a QR code with your camera
• Secrets encrypted at rest with AES-GCM 256-bit; encryption key generated on first install and stored only inside your account
• Multi-collaborator support: administrators can create accounts on behalf of other team members
• Admin role with full visibility of all team accounts; collaborators see only their own accounts
• Alphabetical sorting and full-text search (by connection name, client, domain or email)
• Custom color and optional logo per account — identify clients at a glance
• Bilingual UI (Portuguese-BR / English) that automatically follows the Bitrix24 interface language in real time
• Server-side time synchronization — the app uses the Bitrix24 server clock, eliminating TOTP code mismatch from device clock drift
• Import/export accounts as JSON for backup purposes
• Fully idempotent install/uninstall — reinstalling does not duplicate data and preserves encrypted secrets
• Responsive layout — works on desktop, mobile browser and Bitrix24 Mobile App
USE CASES
• Agencies managing multiple client Bitrix24 instances that need to share 2FA codes across the team
• Teams sharing access to AWS, GitHub, Google Workspace, Cloudflare and other services protected by 2FA
• Companies wanting to centralize 2FA management inside a platform they already trust
REQUIREMENTS
• Bitrix24 Cloud (any plan)
• CRM module active (the app creates a Smart Process Automation for storage)
• Admin rights required for first installation (to create the SPA and custom fields)
• Scopes required: crm, user, userfield, userfieldconfig, intranet, mobile
TECHNICAL NOTES
• TOTP algorithm: HMAC-SHA1 (SHA-256 and SHA-512 also supported)
• Standard parameters: 30-second period, 6-digit codes (60s and 8-digit also supported)
• Storage: Smart Process Automation + app.option — exclusively inside your acco
• No analytics, no telemetry, no external requests
• Open communication only between your browser and the Bitrix24 REST API, over HTTPS
PRIVACY
We do not have access to your data. The Application is designed with a zero-knowledge architecture. See our Privacy Policy for full details.
KEY FEATURES
• Generate TOTP codes (RFC 6238) compatible with Google Authenticator, Authy, Microsoft Authenticator and any standard 2FA service
• Add accounts manually via Base32 secret OR by scanning a QR code with your camera
• Secrets encrypted at rest with AES-GCM 256-bit; encryption key generated on first install and stored only inside your account
• Multi-collaborator support: administrators can create accounts on behalf of other team members
• Admin role with full visibility of all team accounts; collaborators see only their own accounts
• Alphabetical sorting and full-text search (by connection name, client, domain or email)
• Custom color and optional logo per account — identify clients at a glance
• Bilingual UI (Portuguese-BR / English) that automatically follows the Bitrix24 interface language in real time
• Server-side time synchronization — the app uses the Bitrix24 server clock, eliminating TOTP code mismatch from device clock drift
• Import/export accounts as JSON for backup purposes
• Fully idempotent install/uninstall — reinstalling does not duplicate data and preserves encrypted secrets
• Responsive layout — works on desktop, mobile browser and Bitrix24 Mobile App
USE CASES
• Agencies managing multiple client Bitrix24 instances that need to share 2FA codes across the team
• Teams sharing access to AWS, GitHub, Google Workspace, Cloudflare and other services protected by 2FA
• Companies wanting to centralize 2FA management inside a platform they already trust
REQUIREMENTS
• Bitrix24 Cloud (any plan)
• CRM module active (the app creates a Smart Process Automation for storage)
• Admin rights required for first installation (to create the SPA and custom fields)
• Scopes required: crm, user, userfield, userfieldconfig, intranet, mobile
TECHNICAL NOTES
• TOTP algorithm: HMAC-SHA1 (SHA-256 and SHA-512 also supported)
• Standard parameters: 30-second period, 6-digit codes (60s and 8-digit also supported)
• Storage: Smart Process Automation + app.option — exclusively inside your acco
• No analytics, no telemetry, no external requests
• Open communication only between your browser and the Bitrix24 REST API, over HTTPS
PRIVACY
We do not have access to your data. The Application is designed with a zero-knowledge architecture. See our Privacy Policy for full details.
.png)
