diff --git a/classes/config.php b/classes/config.php
index d0c59fbbd3aee0be4e2e74440d7a6ed893713517..68dd47f35c2f6f26cd3bafb86299488fb24b6fe3 100644
--- a/classes/config.php
+++ b/classes/config.php
@@ -6,7 +6,7 @@ class Config {
 	const T_STRING = 2;
 	const T_INT = 3;
 
-	const SCHEMA_VERSION = 142;
+	const SCHEMA_VERSION = 143;
 
 	// override defaults, defined below in _DEFAULTS[], via environment: DB_TYPE becomes TTRSS_DB_TYPE, etc
 
diff --git a/sql/mysql/migrations/143.sql b/sql/mysql/migrations/143.sql
new file mode 100644
index 0000000000000000000000000000000000000000..6fb7226b52d7b51a048c9ed18c4d2c3716075735
--- /dev/null
+++ b/sql/mysql/migrations/143.sql
@@ -0,0 +1,2 @@
+alter table ttrss_users add column otp_secret varchar(250);
+alter table ttrss_users alter column otp_secret set default null;
diff --git a/sql/mysql/schema.sql b/sql/mysql/schema.sql
index cb1536ab692d380700686ba7cb41ee39cca15a61..64d423f04b66de9fcf64812d5cdbbfa2595b3a6a 100644
--- a/sql/mysql/schema.sql
+++ b/sql/mysql/schema.sql
@@ -53,6 +53,7 @@ create table ttrss_users (id integer primary key not null auto_increment,
 	created datetime default null,
 	twitter_oauth longtext default null,
 	otp_enabled boolean not null default false,
+	otp_secret varchar(250) default null,
 	resetpass_token varchar(250) default null) ENGINE=InnoDB DEFAULT CHARSET=UTF8;
 
 insert into ttrss_users (login,pwd_hash,access_level) values ('admin',
diff --git a/sql/pgsql/migrations/143.sql b/sql/pgsql/migrations/143.sql
new file mode 100644
index 0000000000000000000000000000000000000000..6fb7226b52d7b51a048c9ed18c4d2c3716075735
--- /dev/null
+++ b/sql/pgsql/migrations/143.sql
@@ -0,0 +1,2 @@
+alter table ttrss_users add column otp_secret varchar(250);
+alter table ttrss_users alter column otp_secret set default null;
diff --git a/sql/pgsql/schema.sql b/sql/pgsql/schema.sql
index f11b1a8775c4c1888e928343d37d023bc1545739..124b04aca17946e89c47cc88718c1cde35714a01 100644
--- a/sql/pgsql/schema.sql
+++ b/sql/pgsql/schema.sql
@@ -50,6 +50,7 @@ create table ttrss_users (id serial not null primary key,
 	salt varchar(250) not null default '',
 	twitter_oauth text default null,
 	otp_enabled boolean not null default false,
+	otp_secret varchar(250) default null,
 	resetpass_token varchar(250) default null,
 	created timestamp default null);