[Fluent Auth] Two-factor auth optional for everyone
I would like to have 2FA feature optional for everyone.
- Normally have it disabled for everyone
- User can choose on his profile to use it for his profile or not
- Admin can have still possibility to force some specific roles to MUST use 2FA
It would help security of FC platform overall in my opinion. Anyway I would much more prefer Google Auth solution instead of emails but better than nothing.
I agree with the last part. Authentication codes over email isn’t even a 2FA method since the codes are sent to the same email address as the password recovery email. It’s two-step verification, but not two-factor authentication.
Would love to see Google Auth OTPs and passkeys. (Not a fan of SMS or email OTPs, though magic login links can be convenient.)
Wordfence has a feature for this. You just enabled it and put the short code. Would love to see that on auth!