TOTP/ HOTP 2FA for login page

[ammnt]

Hello,

please add TOTP/ HOTP 2FA for login page.

Thank you.

Cheers!

[owenvoke]

Related to this, maybe even WebAuthn support. 🤔 I guess TOTP can be easier to implement sometimes, but WebAuthn would be a great addition.

Update: Passkeys might be a good option to add as well if this ever gets implemented. 🤷🏻

[BirdInFire]

i only ask, any news on this ? (totp) and why not add NtpSec (#2267) support (client at least) to check the hour (for being sure the otp is correct).

[ameshkov]

Nope, no news. But since there're relatively many upvotes, it's time to at least assign it to a milestone.

[BirdInFire]

Nope, no news. But since there're relatively many upvotes, it's time to at least assign it to a milestone.

Any news 3 year later it become quite a long wait...

[owenvoke]

@BirdInFire, looks like this is planned for milestone v0.109, so can't see this happening anytime soon. 😬 It's been nearly 2 years that v0.108 has been in beta.

---

On a related note, Passkeys might be a good option to add as well if this ever gets implemented. 🤷🏻

[BirdInFire]

@BirdInFire, looks like this is planned for milestone v0.109, so can't see this happening anytime soon. 😬 It's been nearly 2 years that v0.108 has been in beta.

On a related note, Passkeys might be a good option to add as well if this ever gets implemented. 🤷🏻

I lost hope and use authentik before it (for password less login), but their app completely ignore authorization header so I must log twice, and the trick of very long ttl only work if you remember password

[ainar-g]

No news, and you don't need 2FA to make your web interface unavailable from the outside. You can ask around in Discussions to find ways that fit your case.

[pictosun]

Any update concerning 2FA for AGH? Especially when using it via a VPS server this would be a nice feature to have.

[winnieyuen]

No update after 4 years...

[BirdInFire]

No update after 4 years...

The world move to passkey and adguard don't have otp on home .... Up-to-date security I tell.