046-2fa-support.md

#046: Two-Factor Authentication (2FA)

Status: ✅ DONE

Category: [BACKEND] Difficulty: ● MEDIUM Tags: 2FA, security, totp

Description

Implement TOTP-based Two-Factor Authentication for sensitive actions (triggering payroll, updating wallet addresses). Support app-based authenticators like Google Authenticator or Authy.

Acceptance Criteria

• Users can enable/disable 2FA in their profile.
• Recovery codes generated upon setup.
• Verification required for critical API endpoints.