RSS Feed/News Add an option to disable two step verification providers

[ENXF NET]

Currently, the built-in providers

• Backup Codes
• Email confirmation
• Verification code via app

are always active (if TFA isn't entirely disabled).

But those providers are not equal (in terms of usability and security); especially Email confirmation seems somewhat cumbersome, leaks data and should be considered rather insecure (nobody knows if the email isn't forwarded unencrypted at some point for exmple).

This is even documented in the description:

Other two-step...
Click to expand...

Read more

Continue reading...