[Request] u2f?

CrimsonSoul · Aug 23, 2022

I know I'm probably the only person on the forum that would use it but would it be possible to enable support for security keys (u2f). tyvm

Dave · Aug 23, 2022

I don't even know what that is but I'll hit the google.

Dave · Aug 23, 2022

That's just 2 factor authentication. I'll see what I can do.

CrimsonSoul · Aug 23, 2022

Dave said:
That's just 2 factor authentication. I'll see what I can do.

It's 2 factor but it's using a physical key instead of an authenticator app

Ravenpoe · Aug 23, 2022

CrimsonSoul said:
It's 2 factor but it's using a physical key instead of an authenticator app

Who wants access to your halforums account that badly?

CrimsonSoul · Aug 23, 2022

Ravenpoe said:
Who wants access to your halforums account that badly?

No one, but I use the same password for a lot of stuff because I'm a horrible person and I deserve to be hacked so I'm trying to mitigate a little bit. and u2f is the only way I can log in to a lot of websites at work because I have to use a tor browser to bypass my works proxy's so it looks like I'm logging in from all over the world lol

Wahad · Mar 30, 2023

Hijacking this thread as a follow-up; is it possible to enable the 2FA setting on this forum to send for a notification that you can approve, instead of having to put in the one-time-code that's listed in the app? I like having 2FA, but I also like convenience.

GasBandit · Mar 30, 2023

Wahad said:
Hijacking this thread as a follow-up; is it possible to enable the 2FA setting on this forum to send for a notification that you can approve, instead of having to put in the one-time-code that's listed in the app? I like having 2FA, but I also like convenience.

Currently, there may be a way to implement that if you use Authy, but ONLY if you use Authy, and it requires some backend API shenanigans that I won't even begin to be able to look at until after work.

The only other options are one time codes and e-mail verification.

Do you use Authy?

PatrThom · Mar 30, 2023

The difficulty with SMS authentication is that someone has to pay for the SMS messages, and that's going to depend on whether the company that hosts HF includes that in the plan or whether they are going to pass that cost along to @Dave -- as a courtesy, no doubt.

--Patrick

Wahad · Mar 30, 2023

GasBandit said:
Currently, there may be a way to implement that if you use Authy, but ONLY if you use Authy, and it requires some backend API shenanigans that I won't even begin to be able to look at until after work.

The only other options are one time codes and e-mail verification.

Do you use Authy?

I do not. Ah well, worth a shot!