2 Factor Authentication

Hey,

I’m not entirely sure if this is possible, but if it is then could we get 2 factor authentication (through one of those QR codes you scan in google authenticator or something) added to the forum? It would be great to be able to secure your account in one more way.

2 Likes

Any user can already set up 2FA. It comes standard within Discourse.

Just go to:

Settings > Account > ‘Enable two factor authentication for enhanced account security’ and follow the steps.

4 Likes

Didn’t know it was already there, I’m adding it now!

4 Likes

Alternatively, this can be set up as a requirement by the moderation team.

See here: https://meta.discourse.org/t/two-factor-local-login-proposal/76689

And here to install the feature: https://github.com/discourse/discourse/pull/5612

3 Likes

I think as a requirement would be a bit extreme, but it’s good to have the option to secure your account

5 Likes

I’m personally against the idea of having it as an actual requirement for everyone. Many users won’t want to go through the hassle of 2FA just to get an account here.

5 Likes

Yeah, I’m not advocating for it but I thought I would provide the info just in case anyone is interested. Also wasn’t sure exactly how the OP was thinking the feature would be implemented.

3 Likes

OP (being me) didn’t know 2FA was already a native discourse feature, I thought it could be added through a plugin. Obviously, it’s already added so no need for a plugin or anything.

6 Likes

What does 2 factor authentication mean?

1 Like

Two steps to log in, basically better security for your account, but more time to log in on new device…

1 Like

To add on to the above:

After entering your login info, a code (numeric, qr, etc.) is sent to a device that you connect to your account. This could be an email or a phone number.

It creates an extra layer of security for your account by requiring you to not only know your login info, but to also have one of your devices near you so the platform knows it is truly you who is logging in.

Read more here: https://www.securenvoy.com/en-gb/two-factor-authentication/what-is-2fa

3 Likes

Thank you for the reply.

3 Likes