[FEAT]: 2FA / MFA Support for Login Page (TOTP / Authenticator App)

What would you like to see?

Feature Description Add Two-Factor Authentication (2FA / MFA) support for local/password-based user logins in the open-source version of AnythingLLM to improve instance security.

Preferred Provider / Implementation

• Provider: Time-based One-Time Password (TOTP) / Standard Authenticator Apps (e.g., Google Authenticator, 1Password, Microsoft Authenticator, Authy).
• Alternative (optional): Email OTP / Passkeys (WebAuthn).

Use Case When hosting AnythingLLM on a public-facing server or custom domain, basic password protection leaves the application vulnerable to brute-force or credential-stuffing attacks. Adding standard TOTP 2FA during login ensures only authorized users can access the workspace.