Two-Factor Authentication

Fluid can add a two-factor authentication step to the withdrawal flow: before the withdrawal is submitted, the user must enter a 6-digit authenticator code, which your platform validates.

Caution

This is strictly a client-side UI gate. Fluid does not generate, know, or verify authenticator codes — it collects the code and hands it to your page through the bridge handler. Backend enforcement of 2FA on withdrawal operations remains essential.

Enabling the feature

Set the two-factor-auth-enabled attribute to "true" based on each player’s 2FA settings:

<fluid-widget two-factor-auth-enabled="true" ...></fluid-widget>

This is a per-player flag — your platform determines whether 2FA appears for each user. The attribute updates reactively when the wallet is closed.

Bridge handler

Register a verify2FA handler through the Window Bridge API:

window.fluid.bridge.handleRequest('verify2FA', async ({ code }) => {
    const result = await myApi.verify2FA(code);

    if (result.valid) {
        return { status: 'valid' };
    }

    if (result.rateLimited) {
        return {
            status: 'rate_limited',
            retryAfterMs: result.retryAfterMs
        };
    }

    return { status: 'invalid' };
});

Response statuses

Status	Behaviour
valid	Withdrawal proceeds
invalid	User prompted to retry
rate_limited	User informed of rate limit; retryAfterMs controls when retry is available

Availability

Works with the Fluid Cashier only — not for Quick Deposit or Fluid Sweepstakes.