Test are also covered by unittest. (Partly copied from MDL-78509 ) Prerequisites Apply the patch Do the upgrade processes until finished You can enable the mfa plugin at the end of the upgrade process or You can enable the mfa plugin by going to the Site admin > plugins > admin tools  Go to Site admin > Development > Third party libraries Verify that OTPHP's version is now 11.3.0. Testing Warning : If you have inadvertantly messed things up and locked yourself out, you can disable the whole MFA plugin from the CLI : php admin/cli/cfg.php --component=tool_mfa --name=enabled --set=0 Note : Please use two different browsers for testing otherwise you will be locked by a specific factor One is for the configuration called "Site admin" The second second browser is for testing called "Testing". TOTP factor test (Authenticator app) - Only applied to Admins Go to Site admin > plugins > admin tools Enable the Authenticator app factor and just leave the default Settings Still in "Site admin" browser, click on user profile picture in header, the click on Preferences Click on Multi-factor authentication preferences in User account block Look for Authenticator app block under Multi-factor authentication then click on the Set up button Set Device name to any names (This field is required) Scan the QR code displayed in that page using any authenticator app Once it's added, you will get code from the app Enter the code from the app in Enter verification code for confirmation then save changes Go to "Testing" browser and login as admin Verify that you are taken to a page where you need to enter the code from the authenticator app and enter the code in Enter verification code for confirmation Verify that once the code is entered, you are taken straight to home page without pressing the Verify code button