The Jenkins 2FA Plugin for Two-Factor Authentication
Add multi-factor authentication (MFA) to your Jenkins instance. Prevent unauthorized access to your CI/CD pipeline with TOTP, email OTP, hardware security keys, and more.
$49/month after 30-day trial
Enter Verification Code
Open your authenticator app and enter the 6-digit code
81%
of breaches involve stolen or weak credentials
99.9%
of automated attacks blocked by 2FA
#1
recommendation by security experts
Production-Ready 2FA for Jenkins
Comprehensive two-factor authentication with the flexibility your team needs.
TOTP Authentication
Industry-standard time-based one-time passwords compatible with Google Authenticator, Authy, and other TOTP apps.
Email OTP
Receive verification codes via email. Perfect for users without authenticator apps or as a backup method.
Backup Codes
Generate one-time backup codes for recovery when users lose access to their authenticator app.
IP Whitelisting
Bypass 2FA for trusted networks. Configure IP addresses or CIDR ranges for office and VPN connections.
Brute Force Protection
Automatic account lockout after failed attempts. Configurable thresholds and lockout durations.
Per-User Policies
Enforce 2FA for specific users or groups. Require it for admins while making it optional for regular users.
Audit Logging
Comprehensive logs of all authentication events. Track enrollments, logins, and admin actions.
Hardware Keys & Security Questions
Add FIDO2 hardware security keys or security questions as supplementary backup factors alongside TOTP, email OTP, and backup codes, never your only factor.
GeoIP Country Restrictions
Allow or block Jenkins logins by country using a local GeoIP database, with a self-lockout preview before you save.
Protected API Tokens
Set an expiry with a best-effort email notice, bind a token to specific network addresses, and audit every use, enforced even if 2FA Guard is disabled.
Delete a User's 2FA Data
A dedicated, audited admin action that permanently deletes everything 2FA Guard stores for one user, including TOTP secrets, backup codes, and lockout records.
Works With Any TOTP App
TOTP is one of several supported methods, alongside hardware security keys, email OTP, security questions, and backup codes.
Google Authenticator
Authy
Microsoft Authenticator
1Password
Bitwarden
Ready to Secure Your Jenkins?
First-time subscribers get a 30-day free trial: cancel before it ends and you won't be charged.
Start Free Trial