this post was submitted on 13 Jan 2022
5 points (85.7% liked)

Lemmy Support

4713 readers
38 users here now

Support / questions about Lemmy.

Matrix Space: #lemmy-space

founded 5 years ago
MODERATORS
 

2FA Auth with Lemmy will give more security to the account, and having both a secret key, and qr code will allow any 2FA app to work with it.

Backup codes would also, be a plus with a button to export them into a .txt file.

top 9 comments
sorted by: hot top controversial new old
[–] [email protected] 2 points 3 years ago* (last edited 3 years ago) (2 children)

yes please!

Only problem is admins have to have a way of "resetting" 2FA when users inevitably loose their phone =/

[–] [email protected] 3 points 3 years ago (1 children)

Why would it be the responsibility of the admins if users don't have proper backups? Wouldn't the ability to reset 2FA completely negate the advantages of it if the admins can be subject to a phishing attack that removes 2FA from someones account?

[–] [email protected] 0 points 3 years ago (2 children)

most people are stupid, so most people will lose 2fa, so most people on your instance will be locked out.

You can not like this, but its what will happen if you allow 2fa without having any recovery methodology =/

[–] [email protected] 2 points 3 years ago (1 children)

most people are stupid, so most people will lose 2fa, so most people on your instance will be locked out.

idk sounds like a good way to filter out stupid people lmao

[–] [email protected] 1 points 3 years ago

It's a feature not a bug.

[–] [email protected] -1 points 3 years ago

that's not how it works. It's not the admin's job to fix your password stupid.

[–] [email protected] 3 points 3 years ago

At least admins should have 2FA

[–] [email protected] 1 points 3 years ago (1 children)

There's an issue on the github for this.

[–] [email protected] 1 points 3 years ago

Link for OP