search

2factorauth / twofactorauth

List of sites with two factor auth support which includes SMS, email, phone calls, hardware, and software.
https://2fa.directory
Other
3.39k stars 1.78k forks source link

Kraken supports fine-grained U2F #2580

Closed ghost closed 7 years ago

ghost commented 7 years ago

Kraken supports U2F now for YubiKeys. (Hardware tokens)

They also support fine grained 2FA even after login, specific actions can now be locked down to use u2F.

mxxcon commented 7 years ago

We consider fine grained controls as "two factor authorization" and are not applicable to this site.

RichJeanes commented 7 years ago

For clarity, @mwgh84, does Kraken support U2F on login or just to authorize actions after login?

ghost commented 7 years ago

Yes it supports it at login.

RichJeanes commented 7 years ago

Is there any documentation available for this yet? I cannot find anything about it on their support site or blog.

ghost commented 7 years ago

https://support.kraken.com/hc/en-us/articles/203395513-How-do-I-set-up-two-factor-authentication-

It certainly does support it in their 2FA list of options.

RichJeanes commented 7 years ago

There is nothing about U2F on that page. Are you sure it isn't just Yubico OTP that they support?

This would still be considered a hardware token, but it is definitely not U2F.

RichJeanes commented 7 years ago

Since that page explicitly mentions the Yubikey's HOTP, I would say that it is the Yubico OTP they support, not U2F.

(And as an amendment to their documentation, the Yubikey does support TOTP, but requires an additional application to do it).

ghost commented 7 years ago

You're right, my bad, it is just OTP (hardware HOTP).