search

chibisafe / chibisafe

Blazing fast file vault written in TypeScript! 🚀
https://chibisafe.app
MIT License
1.75k stars 266 forks source link

[FEATURE REQUEST] 2 Factor Authentication #616

Open Peppershade opened 4 months ago

Peppershade commented 4 months ago

Is your feature request related to a problem? Please describe. Safety is an import factor when handling personal files, photos and other data. A password is not enough anymore to protect an account. Although all files are publicly accessible, it's still a risk of exposing all of your files instead of just a guessed image name (which is already unlikely).

Describe the solution you'd like Please add 2FA to Chibisafe. A TOTP would be enough. But passkey implementation would be a nice to have. I am aware of the API accepting username and password, so that should include the 2FA too, using a TOTP.

HT-7 commented 3 weeks ago

It should only be optional. There is a risk of being locked out of ones account, see this video by Jody Bruchon.

Pitu commented 3 weeks ago

MFA should always be optional. Once we add it, users will be able to opt-in for added security.