Domoticz – Two-Factor Authentication

From Domoticz version 2026, it is possible to use two-factor authentication, which significantly improves the security of the system.

With a traditional login, knowing the username and password is sufficient. With two-factor authentication enabled, Domoticz also requires a second, time-based verification code.

This means that even if someone obtains your username and password, they still cannot easily log in without access to your authenticator application.

What do you need?

To use two-factor authentication, you need to install an authenticator application on your phone.

For example, you can use:

• Bitwarden,
• Google Authenticator,
• or another compatible authenticator application that supports standard time-based one-time passwords.

Enabling Two-Factor Authentication

Log in to the Domoticz web interface and open:

My Profile

Then enable:

Two-Factor Authentication

Scanning the QR Code

After enabling two-factor authentication, Domoticz displays a QR code.

Open the authenticator application on your phone and scan the QR code shown by Domoticz.

The authenticator application will then create a new entry for your Domoticz account and display a short numeric code that changes automatically at regular intervals.

Confirming the Setup

Enter the current verification code shown on your phone into the Code field in Domoticz.

Then click the Update button to save the setting.

Two-factor authentication is now enabled.

Logging In with Two-Factor Authentication

The next time you log in, first enter your username and password as usual.

Domoticz will then ask for an additional verification code.

Open the authenticator application on your phone and enter the current code shown for your Domoticz account.

The code is valid only for a short period of time, after which the authenticator application automatically generates a new one.

Why is it worth using?

Two-factor authentication adds an additional security layer on top of your username and password.

If someone manages to obtain your Domoticz login credentials, they still cannot easily access the system without the verification code generated on your phone.

This is especially important if the Domoticz web interface is accessible from the internet.

Two-factor authentication makes the login process slightly less convenient, but the additional security it provides is well worth the extra step.