Knowledge Base / Protector

Two-Factor Authentication (2FA) & Alerts

kloxteam

Even the strongest password can be stolen through phishing or data breaches. Protector Pro adds an unbreakable layer of security by requiring a second form of identification that only you possess: your smartphone. This guide explains how to set up Two-Factor Authentication and configure real-time login alerts.


1. Unbreakable Login Security (2FA)

Protector Pro uses Time-based One-Time Passwords (TOTP), the industry standard for secure authentication.

  • Simple Setup: Navigate to your Users > Profile page to find the 2FA configuration area.

  • Universal Compatibility: Scan the generated QR code with apps like Google Authenticator, Authy, or Microsoft Authenticator.

  • Verification: You must enter a valid 6-digit code once to verify the connection before 2FA is officially enabled for your account.

  • Login Interception: Once active, Protector Pro pauses the login process after your password is confirmed and requests your unique 6-digit mobile code.

Account Recovery:

2FA is managed on a per-user basis. Administrators can disable 2FA for other users from the user edit screen if a device is lost.

2. Real-Time Admin Login Alerts

Knowledge is power. Protector Pro ensures you are the first to know whenever someone accesses an administrative account on your website.

  • Instant Email Alerts: Receive an automated security email the moment a successful administrator login is detected.

  • Contextual Details: Every alert includes the username, exact timestamp, and the IP address used for the login.

  • Fraud Detection: If you receive an alert while you aren’t logging in, you can take immediate action to change your password and lock down the site.

3. Advanced Automation via Webhooks

For power users and agencies, Protector Pro can send login data to external automation platforms like Zapier, Make.com, or n8n.

  • Custom Workflows: Trigger a message in Slack, Discord, or a custom security dashboard whenever an admin logs in.

  • JSON Payload: Protector sends a clean JSON package containing all relevant login event data.

Webhook_Payload_Example
Outgoing Security Webhook
{ “event”: “admin_login”, “site”: “Klox_Production_Site”, “username”: “admin_marcello”, “ip”: “192.168.1.45”, “time”: “2026-03-26 16:30:00” }
Status: Delivered to External API