Feature Request: Two Factor Auth

[viertaxa]

I'm currently testing out Wire. One thing that immediately stood out to me is the lack of two factor auth across the whole platform. To me, this is a critical feature of a security minded service of any kind.

Off the top of my head, the following things would be a great start if they were able to be enabled independently of each other:

• Allow for TOTP (Authy, Google Authenticator, similar)
• Allow for One Time Pad (OTP) as a backup
• Allow for U2F/FIDO (Yubikey, etc)
  • For adding mobile devices: touch U2F token on PC with Chrome also signed into account?
• Allow for authenticated devices to authorize new device

[KaKi87]

Yes, it is helping people using better software.

[orangesunny]

I am using both every day and I can’t say one’s better. I am missing 2FA in Wire as well as in Signal, also many features in both. To top of that, it’s hell to change the number with Signal. Try to move to a different country with it. 😭 I am leaving this off-topic, have a lovely day.

[Ralms]

I am using both every day and I can’t say one’s better. I am missing 2FA in Wire as well as in Signal, also many features in both. To top of that, it’s hell to change the number with Signal. Try to move to a different country with it. 😭 I am leaving this off-topic, have a lovely day.

Signal doesn't need 2FA, your phone number and the pin you set is a 2FA by itself. Additionally, changing number in Signal is as easy as backing up, setting the app with the new number and restore lol.

[orangesunny]

Signal doesn't need 2FA, your phone number and the pin you set is a 2FA by itself. Additionally, changing number in Signal is as easy as backing up, setting the app with the new number and restore lol.

I will be happy if we can continue in an appropriate discussion for that and you can guide me on how to do it: https://github.com/signalapp/Signal-iOS/issues/967

[arianvp]

If there are people here who are planning to attend https://zfoh.ch/zurihac2021/, last year I made a start on https://github.com/arianvp/haskell-fido2 ; a Haskell library for U2F/FIDO2 authentication.

This year I'm planning to finish up the library and add support to https://github.com/wireapp/wire-server .

Having this supported in the backend is a small step; but at least it's a step. Hopefully we can then use that legwork to implement this into the client someday :)

If you're attending Zurihac and want to help out. That would be greatly appreciated!

I added some notes for myself in this repo last year with useful reading resources: https://github.com/wireapp/fido2-hackathon

[Mark-BC]

Any update on adding 2FA to Wire?

[muscovitebob]

seems unlikely to be prioritised anytime soon considering most of the customers are large enterprises now and they all have 2FA via their SSO providers

[Ralms]

Any update on adding 2FA to Wire?

Simply move to Signal.