Useful Drupal modules
Click on the module name for notes, comments, patches.
Recommendations (for and against) are my personal opinion only and may be out of date. Feel free to email with corrections/suggestions.
Why haven't you mentioned Drupal 9? As of February 2022 I've updated all the sites I look after to Drupal 9 (experience: mixed). I haven't decided how to label future version compatibility as D10 will be coming soon as well. The upgrade_status module is superb. You're bound to have issues with composer. Also watch out for a nasty session headers bug with redirect_after_login.
What about sites still running Drupal 7? In short I still recommend leaving them on Drupal 7. Your decision is really if you will gain anything from Drupal 8/9 and for many then answer will be no, and one of the main hassles - apart from converting each content type one at a time, and setting up a new theme, will be recreating all your views by hand, as views can't be automatically upgraded.(1 modules in list)
|Name||D8||Personally Tested||Last Updated|
|Two Factor Authentication (tfa)||✔||✔||2018-09-17|
install tfa and ga_login (TFA is just a framework, it doesn't come with it's own login plugins.)
Use this patch I wrote - it adds display of validation skip times and an admin reset button for users who are got locked out.
My installation instructions:
Next you need to generate an encryption profile.
Set key provider to File rather than Configuration, this means the key won't end up in your version control.
Tick the 'strip trailing line breaks' box to avoid the "The selected key size does not match the actual size of the key." error
Key path should be relative to Drupal so the config will work on multiple sites
Remember to save the key somewhere in your password manager, or your ansible variables, in case you lose the files later.
In the TFA settings (/admin/config/people/tfa) you probably want to increase the number of times a user can skip validation.
Note that TFA has a separate 'Tfa user login' block (replacing the ordinary 'User login')