mO 2FA for Confluence (Two Factor Authentication)
Adds two-factor authentication to Confluence Data Center and Server with multiple verification methods.
miniOrangeAdds two-factor login to Confluence using a registered mobile device or other supported authenticator.

The add-on adds a second login step to Confluence alongside the username and password. A registered mobile device generates a PIN that remains valid for half a minute. It supports authenticator apps compliant with RFC 6238, hardware tokens, and FIDO2/WebAuthn.
Authenticator apps on mobile devices can generate the login PIN.
The add-on supports hardware tokens as authentication devices.
FIDO2 and WebAuthn authenticators are supported.
A registered mobile device generates a PIN valid for half a minute.
Secure Login (2FA) for Confluence is paid and supports data-center and server deployment; mO 2FA for Confluence (Two Factor Authentication) and 2FA for Confluence (U2F & TOTP) have the same price type and deployment options. This listing was updated in Sep 2026, compared with Aug 2026 for mO 2FA for Confluence (Two Factor Authentication), Feb 2026 for 2FA for Confluence (U2F & TOTP), and Apr 2025 for WeCom (WeChat Work) QR Code Login for Confluence.
| Name | Pricing | Deployment | Updated |
|---|---|---|---|
| this plugin | Paid | Data Center · Server | |
| mO 2FA for Confluence (Two Factor Authentication) | Paid | Data Center · Server | |
| 2FA for Confluence (U2F & TOTP) | Paid | Data Center · Server | |
| WeCom (WeChat Work) QR Code Login for Confluence | Free | Data Center · Server |
339 plugins in Confluence · Administrative tools
Price distribution: 90 free, 74 freemium, 175 paid
Adds two-factor authentication to Confluence Data Center and Server with multiple verification methods.
miniOrangeAdds U2F and TOTP two-factor authentication to Confluence, with MFA settings, recovery codes, and authentication logs.
Tempo SoftwareLog in to Confluence by scanning a QR code with the WeCom mobile app.
DragonSoftAdds a searchable Q&A forum to Confluence with voting, tags, permissions, and notifications.
Firnity«this is not a strong authentication as both values can be easily passed/copied to other persons using them in parallel to the owner. A secure login depends on multiple aspects and combine e.g. knowledge with physical gadgets, which cannot be duplicated that easily. If the gadget will be stolen, it is useless without …»