Talk:Community Wishlist/Wishes/Introduce two-factor authentication with authenticator app

This page is for discussions related to the Community Wishlist/Wishes/Introduce two-factor authentication with authenticator app page.   Please remember to: Sign posts using the four tildes (~~~~) Remain civil and polite during discussions. Place new text under old text (start a new post).

Already

@Dmartin969 I wouldn't trust Google and Apple with such keys. Better Software & Hardware Swissbit Hardware Key, Nitrokey, [1], authenticatorplus FreeOTP+, OTPClient (linux) All administrators can use 2Fa. There are also user groups that must use this. Non-administrators can be added to a global group that enables 2Fa. See Help:Two-factor authentication 𝐖𝐢𝐤𝐢𝐁𝐚𝐲𝐞𝐫 👤💬 17:58, 28 July 2024 (UTC)

I wouldn't either, if I were a high profile person or IT specialist. But for the average joe, having your keys in iCloud keychain or Google Authenticator is safer than NOT having 2FA, 2FA via SMS or a key that is not automatically backed up. It is really important for wikimedia sites to ensure that people do not lose their key, as unlike most websites, we do not have very good accountrecovery options in that case. —TheDJ (talk • contribs) 20:14, 29 July 2024 (UTC)

Thank you

@Dmartin969 could you elaborate on why you'd like to see 2-factor authentication? JWheeler-WMF (talk) 21:49, 29 July 2024 (UTC)

+1. Personally, I would like to see how this could improve my experience with Wikipedia. 2dk (talk) 19:59, 30 July 2024 (UTC)

I don't understand what is being requested here. We already do have two-factor authentication and have had it since 2016. We deliberately obscure that fact from new editors because we've decided it's apparently too easy to lock yourself out with it, but that's a social choice not a technical issue. And we use TOTP, which many apps should support. In fact, the account this edit is being made from has 2FA enabled, and is required by local policy to have it enabled. * Pppery * _{it has begun} 21:58, 2 August 2024 (UTC)