Security
-
https://apedik.dev/blog/post/magento-admin-2fa-automatically-filled-in-with-1password-no-more-external-tools.html
Tired of manually copying codes from an authenticator app every time you log in to Magento Admin? With 1Password, you can store both your credentials and your 2FA code (TOTP) in one place. Once configured, 1Password will automatically fill in everything — including the 2FA field — without the need for external tools.
07 May 2025
-
https://github.com/kiwicommerce/magento2-admin-activity
Easily track every admin activity like add, edit, delete, print, view, mass update etc. Failed attempts of admin login are recorded as well. You get access to the user’s login information and IP address. Track page visit history of admin. Track fields that have been changed from the backend. Allow administrator to revert the modification.
8095 -
https://www.develodesign.co.uk/learn/five-ways-to-improve-magento-admin-security
Securing your administrative interfaces is more critical than ever. Many Magento installations suffer from poorly configured security that leave your entire system vulnerable. Here are 5 quick yet powerful ways to strengthen your Magento admin security that should be standard practice.
06 May 2025
-
https://github.com/genecommerce/module-encryption-key-manager
This module was built to help you with rotation your encryption keys.
167429 Apr 2025
-
https://github.com/Vendic/magento2-adminrestriction
Deny access to Magento backend from unauthorized IPs. This module represents one of the most effective Magento backend protection policy.
03 Apr 2025
-
https://github.com/DeployEcommerce/module-admin-password-restrictions
This extension adds a configuration option to restrict the use of certain length passwords in the Magento 2 backend.
26 Mar 2025
-
https://github.com/rostilos/sonarqube-magento2-rules
Set of advanced rules for SonarQube, for Magento 2 CMS
13 -
https://github.com/ghostunicorns/module-webapi-logs
This module allows you to analyze all the webapi rest done call toward your magento.
163611 Mar 2025
-
https://sansec.io/guides/sansec-shield
Sansec Shield is a smart Web Application Firewall (WAF) that provides real-time protection for Magento and Adobe Commerce stores. Unlike traditional WAFs that rely on generic rules, Sansec Shield is integrated with the Magento core architecture and benefits from Sansec's famous expertise in Magento security. This makes our WAF the most effective solution to defend your Magento store.
-
https://github.com/Hawksama/module-oauth-security-plus
A powerful module that whitelists IP addresses for Magento 2 REST and SOAP Admin API token generation. Helps prevent unauthorized API access by ensuring only requests from trusted IPs can create admin tokens.
1301 Feb 2025
