Be part of JetBrains PHPverse 2026 on June 9 – a free online event bringing PHP devs worldwide together.

polarcubs's avatar

Restricting 2FA only for users on paid plans

Well I think 2FA is going to incur a little costs so I would like that feature to be only for paid monthly/yearly subscribers. What are the steps I need to take?

0 likes
8 replies
polarcubs's avatar

If I'm not wrong Authy sends an SMS if the user does not have the authenticator app.

I think most people wouldn't bother with downloading with an authenticator app.

bashy's avatar

Authy only sends SMSs if you set it up to do so. There's two sides. OTP (One-time password) is 2FA but token based.

A lot of sites use token based 2FA.

I wouldn't pay to get 2FA support

polarcubs's avatar

Well I'm planning a donationware app, pay what you want subscription model. Lowest is free. Followed by $1.etc

All users get everything except for features that might cause me money like SMS for 2FA.

For hosting I cover the cost myself of course.

Still pretty new to 2FA stuffs was only a consumer so far.

bashy's avatar

In my eyes, anyone enabling 2FA has a auth app.

polarcubs's avatar

In my country, hardly anyone use an auth app. They rather receive an SMS or email and type the code in. That's what I know.

Please or to participate in this conversation.