# Help needed for 2FA with Authy
**URL:** https://discourse.nodered.org/t/help-needed-for-2fa-with-authy/62764
**Category:** General
**Created:** [17 May 2022 16:00 UTC](https://discourse.nodered.org/t/help-needed-for-2fa-with-authy/62764 "2022-05-17T16:00:16Z")
**Posts on this page:** 8
**Page:** 1
### Author:  [@Topolynx](https://discourse.nodered.org/u/Topolynx)
#### Post date: [17 May 2022 16:00 UTC](https://discourse.nodered.org/t/help-needed-for-2fa-with-authy/62764/1 "2022-05-17T16:00:16Z")
Hi! I would like to secure node-red with 2FA and a dedicated app (I'm actually using Authy for other services).
What I've found in the forum and in Node-Red's support pages hasn't helped me enough. Could someone explain me how to activate the new authentication method please? Thanks!
---
### Author:  [@TotallyInformation](https://discourse.nodered.org/u/TotallyInformation)
#### Post date: [17 May 2022 21:08 UTC](https://discourse.nodered.org/t/help-needed-for-2fa-with-authy/62764/2 "2022-05-17T21:08:28Z")
Not especially easy. Even I've not bothered to try it as yet. You will need an authy recipe for PassportJS which you will need to link to node-red via the appropriate property in settings.js.
An alternative and potentially easier way would be to use an Authy recipe for NGINX, using NGINX as a reverse proxy for Node-RED.
I've published some NGINX config for Node-RED not so long back in the forum here.
~~There is an Authy recipe for NGINX here: [Adding 2-Factor Authentication to any Web App using Nginx • Sean's Blog (seantodd.co.uk)](https://seantodd.co.uk/blog/putting-2fa-on-everything/) - not tried it though so don't know how good it is.~~ - Oops! Though that is 2FA, it isn't Authy, sorry - dratted Google searches seem to be getting worse quality recently. Well this search turns up a few relevant articles anyway: [nginx authy - Google Search](https://www.google.com/search?q=nginx+authy)
---
### Author:  [@Topolynx](https://discourse.nodered.org/u/Topolynx)
#### Post date: [19 May 2022 10:01 UTC](https://discourse.nodered.org/t/help-needed-for-2fa-with-authy/62764/3 "2022-05-19T10:01:34Z")
Thanks @TotallyInformation , I really would avoid using NGINX because it is not so simple making it work (in fact I'm using caddy v2 because configuring it wasn't a pain, undoubtedly.
Meanwhile I've set OAuth authentication with Google and Passport following [that thread](https://discourse.nodered.org/t/authenticating-into-node-red-using-google-oauth-working-solution/10047) but something has gone wrong because every Google user could login in my node-red, so I've restored the basic internal authentication method.
---
### Author:  [@Topolynx](https://discourse.nodered.org/u/Topolynx)
#### Post date: [19 May 2022 10:40 UTC](https://discourse.nodered.org/t/help-needed-for-2fa-with-authy/62764/4 "2022-05-19T10:40:07Z")
I have found what I did wrong [here](https://discourse.nodered.org/t/google-oauth2-issues/3489/10) and corrected my settings file...
---
### Author:  [@Steve-Mcl](https://discourse.nodered.org/u/Steve-Mcl)
#### Post date: [19 May 2022 11:09 UTC](https://discourse.nodered.org/t/help-needed-for-2fa-with-authy/62764/5 "2022-05-19T11:09:13Z")
Glad you got it going.
Would be very cool if you wrote this up in #share-your-projects for future readers?
Cheers.
---
### Author:  [@Topolynx](https://discourse.nodered.org/u/Topolynx)
#### Post date: [19 May 2022 17:12 UTC](https://discourse.nodered.org/t/help-needed-for-2fa-with-authy/62764/6 "2022-05-19T17:12:17Z")
Hi @Steve-Mcl ok I'll do it, but for now I prefer to write the steps here since I still have to figure out how enable the _httpNodeAuth_ and _httpStaticAuth_ for the google user.
---
### Author:  [@Topolynx](https://discourse.nodered.org/u/Topolynx)
#### Post date: [19 May 2022 19:15 UTC](https://discourse.nodered.org/t/help-needed-for-2fa-with-authy/62764/7 "2022-05-19T19:15:55Z")
Ok, that is what I did.
In my [Google console project dashboard](https://console.cloud.google.com/home/dashboard) I have first configured the OAuth consent screen. First step: User Type: **external**.
Saved and moved to the next step.
Selected my email from the menu, filled the _Authorized domains_ and _Developer contact information_,
saved and moved to the next step.
Added the scopes. In the Manually add scopes field I wrote email. Saved and moved to the last step.
Finally, I added my google email, Saved twice. OAuth consent screen configured.
Next step, I have created OAuth credentials. The following screenshot should be clear.
Now with the credentials I moved to configure node-red itself.
First, stop node-red.
Installed passport-google-oauth20.
```auto
npm install passport-google-oauth20
```
Then I have changed the _adminAuth_ section to
```auto
adminAuth: {
type: "strategy",
strategy: {
name: "google",
label: 'Accedi con Google',
icon: "fa-google",
strategy: require('passport-google-oauth20').Strategy,
options: {
clientID: 'your ClientID',
clientSecret: 'your SecretKey',
scope: 'email',
callbackURL: "https://yournodered.yourdomain.xxx/auth/strategy/callback",
verify: function (token, tokenSecret, profile, done) {
profile.username = profile.emails.constructor === Array ? profile.emails[0].value : null;
return done(null, profile);
}
},
},
users: [
{ username: "youremail@gmail.com", permissions: ["*"]}
]
},
```
Saved and restarted node-red.
If everything is fine the new login screen should be like that:
That's all.
I have commented the httpNodeAuth and httpStaticAuth sections because I would know if I can generate a password for my gmail new user as described [here](https://nodered.org/docs/user-guide/runtime/securing-node-red).
```auto
// httpNodeAuth: {user:"mebeforegoogleoauth",pass:"(see https://nodered.org/docs/user-guide/runtime/securing-node-red)"},
// httpStaticAuth: {user:"mebeforegoogleoauth",pass:"(see https://nodered.org/docs/user-guide/runtime/securing-node-red)"},
```
---
### Author:  [@system](https://discourse.nodered.org/u/system)
#### Post date: [2 June 2022 19:16 UTC](https://discourse.nodered.org/t/help-needed-for-2fa-with-authy/62764/8 "2022-06-02T19:16:16Z")
This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.