• Resolved ip-rob

    (@ip-rob)


    I’ve been trying out the security firewall features as a potential replacement to my current WordPress firewall. One thing I noticed is that MFA uses email. Are there plans to allow the use the more secure method of an authenticator app for MFA?

    Thanks,
    Rob

Viewing 5 replies - 1 through 5 (of 5 total)
  • Plugin Support SergeM

    (@serge00)

    Hello, Rob.

    Could you tell us what improvements do you want to see in the CleanTalk plugin?

    Perhaps any examples?

    Thread Starter ip-rob

    (@ip-rob)

    A good example is the Wordfence implementation of MFA. They have you set up the authenticator app using the QR scan (typical auth app implementation). Then, instead of emailing a code, they prompt for you to enter the MFA code verifying it with the backend provider. This is a truly secure MFA versus email or SMS.

    https://www.wordfence.com/help/tools/two-factor-authentication/

    Does this help?

    Rob

    Plugin Support SergeM

    (@serge00)

    Thank you for the example.

    We will discuss your suggestion among our team within this business week.

    Please wait.

    Plugin Author Denis

    (@shagimuratov)

    Hi @ip-rob,

    Thanks for the suggestion and feedback!

    We are going to implement Google authentication as second way for 2FA. It may takes 4-5 weeks, we will let you know as finish.

    Plugin Author Denis

    (@shagimuratov)

    Hi @ip-rob,

    I am sorry for delay with letting you know.

    We have released 2FA through Google Authenticator a few weeks ago,
    https://cleantalk.org/help/two-factor-auth

    Let me know if you have any questions.

Viewing 5 replies - 1 through 5 (of 5 total)
  • The topic ‘MFA using authenticator app’ is closed to new replies.