Security: Enhanced Security Measures: Two-Factor Authentication (2FA)

[Rosica-Vasileva]

Description of the Enhancement: We offer the implementation of two-factor authentication (2FA) as an additional layer of security for users of the application. This would increase the level of protection against unauthorized access and misuse.

Steps to Implement:

1.Enable 2FA:

Add option in profile settings to enable 2FA. Users can enable 2FA and associate their account with a mobile device or 2FA authenticator. 2.Setting up the Authenticator:

Use a standard two-step authentication protocol (for example, Time-based One-Time Password - TOTP). Users can set up their authenticator (such as Google Authenticator) by scanning a QR code provided by the app. 3.2FA Verification:

Each time they log into the app, users must enter a 6-digit code from their authenticator. Possibility of Recovery:

Introduce a recovery process in the event of loss or damage to the 2FA-related device. Ability for users to set up an alternate recovery method, such as a backup code or email confirmation. 4.Expected Benefits:

Enhancing the security of user accounts. Protection against potential attacks based on stolen or compromised passwords. Providing users with additional controllability and security over their account.

[Rosica-Vasileva]

Two-Factor Authentication (2FA) is a security mechanism that requires users to provide two different methods of verifying their identity before accessing their account or certain resources. This method further increases security over a simple username and password. Typically, 2FA uses a combination of the following factors: Something you know: This is the usual username and password that the user enters. Possession (Something you have): This factor includes something the user has, such as a device for generating temporary codes (authenticator), a physical key (USB key), or a smart card. Biometrics (Something you are): This factor uses biometric data such as fingerprints, facial recognition or retinal scans.