(01-17-2021, 07:53 PM)6ix Wrote:

(01-17-2021, 04:21 PM)green314 Wrote:

(01-17-2021, 03:19 PM)mothered Wrote: I suggested It on my blog, not based on personal choice.

As said, It's not convenient. I prefer to simply enter a password and be done  with It.

(01-17-2021, 03:25 PM)fsociety Wrote: i will never use 2fa on forum... i use strong passwords even it got breach doesnt care...i dont use personal email on forum...even you get hacked.... doesnt matter...but making strong password , hope sinister is using password encryption like mds5 + salt if no salt and weak lenght password than easily crack you accounts.

I don't use personal email or weak password either.
I don't get why you dislike the 2FA, in my opinion is a true shield against people who wants to have access to your account. Anyway, as you prefer.

Imo 2FA is great in concept, but just depends on what type is implemented.
2FA with phone number is just vulnerable to sim swap, so it provides a liiittle extra security if the attackers don't have that much interest in getting into your account.
But if they do your security is just in the hands of some Verizon Employee that couldn't care less, as proven many many times.

(01-18-2021, 05:33 PM)Oni Wrote: I understand not everyone is interested in this. If added, would obviously be 100% optional to use.

(01-17-2021, 07:53 PM)6ix Wrote:

(01-17-2021, 04:21 PM)green314 Wrote: I don't use personal email or weak password either.
I don't get why you dislike the 2FA, in my opinion is a true shield against people who wants to have access to your account. Anyway, as you prefer.

Imo 2FA is great in concept, but just depends on what type is implemented.
2FA with phone number is just vulnerable to sim swap, so it provides a liiittle extra security if the attackers don't have that much interest in getting into your account.
But if they do your security is just in the hands of some Verizon Employee that couldn't care less, as proven many many times.

If added, it would likely be the Google/Authy kind of 2FA.

(02-04-2021, 01:04 PM)UFCFAN47 Wrote: No reason not to be in favour of an extra layer of security for your account, especially when it is optional to activate and deactive. If this gets implemented, I would highly recommend members utilizing the Authy application over the Google Authenticator application, as Authy can sync the codes across devices and is more facile to backup.

(02-09-2021, 10:02 AM)Oni Wrote: There exists a plugin for 2FA that I looked at, but it does not work to my satisfaction. It would add your secret key, without you scanning it. This means you could potentially lose entire access if done improperly.

This might not be done for quite some time, as we'll have to make our own plugin or modify the existing one.

(01-16-2021, 06:11 PM)green314 Wrote: I would like to set the 2FA (I am sure all of you know what is it) for my account here on sinister.li, but since it's not currently available I suggest to implement that feature. Thank you.