Two factor authentication

Comments: 6

Oldest • Newest • Most likes • Fewest likes

• Add a comment
• 03 Dec, '21
  Richard Bateman Admin

  This is planned; WebAuthn minimum but probably Google authenticator / Authy as well, maybe text messaging also. TBH I would have done it already but I haven't found a straightforward enough example of implementing it with vue / node.js yet and haven't had time to dig through the ones I found.
  
  This would be good, but I just have a dozen other higher priorities right now =]

  Copy link to this comment
• 05 Jul, '23
  J.A. Hall

  CODEVOWEB - How to Implement Two-factor Authentication (2FA) in Node.js
  https://codevoweb.com/two-factor-authentication-2fa-in-nodejs/

  Copy link to this comment
• 14 Jun
  Bruce

  NO! I have a hard enough time just being able to get to the sign button. This would slow up the process significantly, and I think it is a waste of time. Hackers have already figured out how to defeat this.

  Copy link to this comment
• 16 Jun
  Richard Bateman Admin

  I am unaware of any way that hackers could defeat the specific mentioned options - particularly Fido2/WebAuthn. Ideally it would just use a security key, fingerprint, or face id (on windows or mobile), and that would actually make it *easier* to use rather than more difficult, and definitely much more secure.
  
  That said, it's also unlikely we'd make it required, because even though it would be better and easier for someone to use it many people would be unwilling to learn how or try it.

  Copy link to this comment
• 18 Jun
  Sparky KQØRS

  My Suggestion would add Yubi Key as Two Factor Feature.

  Copy link to this comment
• 19 Jun
  Richard Bateman Admin

  Both Fido2 and WebAuthn would support a yubikey, as well as touchid, faceid, windows hello, and several other similar things.

  Copy link to this comment