DESIGN AND IMPLEMENTATION OF TWO FACTOR AUTHENTICATION (2FA) LOGIN SYSTEM
Abstract
ABSTRACT
This research project focuses on the design and implementation of a two-factor authentication (2FA) login system aimed at enhancing security in web and desktop applications. The study highlights the limitations of single-factor authentication (SFA), such as susceptibility to
phishing, brute-force attacks, and weak password practices, particularly in resource-constrained environments like Northern Nigeria.
The proposed system integrates traditional password-based authentication with an email-based one-time password (OTP) to strengthen login security. It employs PHP/XAMPP for the web version and Electron with SQLite for an offline-capable desktop version, ensuring accessibility in areas with poor internet connectivity.
System testing confirmed its functionality, security, and usability. The implementation of bcrypt hashing, OTP expiry, and prepared statements prevented common attacks such as credential theft and SQL injection. User evaluations showed the system was simple, effective, and regionally suitable.
This project demonstrates that email-based 2FA offers a cost-effective, secure, and user-friendly solution to authentication challenges, making it a valuable contribution to improving cybersecurity in developing regions.
Full-Text Access Notice
In accordance with the NERD Policy on promoting peer-reviewed publication, public access to the full text of a project, thesis or dissertation is restricted for three years, allowing the author and supervisors sufficient time to pursue peer-reviewed publication.
During this period, researchers with legitimate academic or research purposes may request authorisation directly from the author to enable NERD to release the indexed full texts of the work using the form below.