2FA under Account in Settings

2FA under Account in Settings! Does anyone know what this means? Should it be checked? See screenshot!

  • 476
  • More
Replies (12)
    • Thanks, that’s good to know!

      • Tim Burleigh its called 2 factor authentication it allows you to better protect user accounts as it adds a 2nd layer of security when users log in to there profiles

        • well this is for authentication so it would not do that but you can have 2 or even 3 factor log in that's the security side to it it has a number of applications 2 factor or as i stated even 3 factor

          • This is so stupid; we can have text as long as "Automatic profile creation from account name" but "Enable two factor authentication" is too much to type.

            • Yep, not using it.

              • Hello

                2FA will be replaced with 2 Factor Authentication in the next update.

                • Hello

                  2FA will be replaced with 2 Factor Authentication in the next update.

                  Hey Anton - what does this mean...are there plans to replace something that doesn't work (2FA and Twilio) with a completely different solution?  Or is it just going to be a name change in Account Settings?  I haven't been able to get 2FA to work at all and appears no one else is as well.  If ANYONE has successfully been able to utilize 2FA, I'd like some feedback!!

                  • Hello Jethro !

                    It means that 2FA will have a more comfortable name in the Studio in the closest update. If you have troubles with it now then please contact me by Messenger, we will review your situation.

                    • I have the same issue as @Jethro. 2FA does not seem to work at all. I have Twilio keys, and all appears to be set up correctly, but there is nothing that comes up asking me to enter a mobile number, or enter the 2FA code. Does a form have to be modified for this to work?

                      • Hello GondarMD !

                        No, the Twilio cooperation was left the same. Nothing changed from this manual https://github.com/unaio/una/wiki/2FA-(two-factor)-authentication . So firstly you need to provide me your UNA studio access via Messenger and possibly the Twilio account's credentials too.

                        • Update from my side. I enabled the key again, and I now get a phone number verification step on login. It appears that I need to enable a Twilio SMS number in South Africa for me to be able to send SMS's via Twilio - I'm waiting for the paperwork to get completed for that. So it _appears_ to work at this stage, but I will only be able to fully test the functionality once I get the SMS-enabled number for Twilio.

                          • The Twilio integration for 2FA appears to have been working in UNA v10, now upgraded to 11.0 and it is not working as expected. I have set up my Twilio keys in UNA, and enabled 2FA. 

                            3 issues seen:

                            1. After entering the login details (email & password), I get the secondary form to enter the mobile number. This form does not appear to be able to handle the phone number correctly, and I get an "Error occurred" message after entering the mobile number. No SMS is sent. In the DB log, I saw this message: 

                            "03-29-2020 07:41:39: /home/stillwer/public_html/plugins/Twilio/Version.php:85 [HTTP 400] Unable to create record: The 'To' number + is not a valid phone number."

                            However, there is only a single entry in the log, and this error is not repeated again, so I don't know if it is the cause of the issue. 

                            2. I bypass the 2FA authentication, and clean the value in the DB cache (sys_options) file, which allows me to login. However, I get the message that the phone number is not confirmed. On entering the phone number confirmation screen, I am able to enter the mobile number, and now an SMS code does get sent to my phone. I can enter this code, and the message comes up that the phone number is confirmed. So far, so good.

                            3. However, on any subsequent login with the same user-name, I am still required to confirm the mobile number.

                            Any ideas on what might be going on?

                            Login or Join to comment.