search

qbittorrent / qBittorrent

qBittorrent BitTorrent client
https://www.qbittorrent.org
Other
26.85k stars 3.87k forks source link

2FA authentication for WebUI #13812

Open zero77 opened 3 years ago

zero77 commented 3 years ago

Can you please add 2FA to provide additional security before being able to login to the webui.

Google already provide a 2FA module that can be integrated with protocols like SSH and OpenVPN. https://github.com/google/google-authenticator-libpam

sledgehammer999 commented 3 years ago

This sounds a bit much for qbittorrent. You're better off putting something else in front of qbittorrent. Something that is designed with such security in mind. eg make it listen for the WebUI only on the localhost and then use a VPN or SSH to access it. And manage VPN/SSH access only through keys/certificates.