Django Admin Secure Pack

An out-of-band one-time-key gate for the Django admin, with pluggable notification backends (Telegram included). Works passwordless or as a 2FA gate.

When someone tries to reach /admin/, a random single-use key is generated and pushed through one or more notification channels you control. Access is granted only after the key is verified — a lightweight second factor with no extra accounts and no TOTP apps.

One-time keys — random, single-use, time-limited, stored in the cache.
Plugin architecture — Telegram today; email, Slack or SMS by writing one small class.
Two modes — passwordless (the key logs straight in) or 2FA gate (the key only unlocks the normal login).
No heavy dependencies — the Telegram backend uses only the standard library.
Secure by construction — keys are looked up by the token itself, sessions expire, and no secret lives in code.