Help:Two-factor authentication/gl: Difference between revisions

Revision as of 12:48, 6 March 2023

Revision as of 19:38, 6 June 2023

Line 41:

** <span lang="en" dir="ltr" class="mw-content-ltr">Open-source: [https://freeotp.github.io/ FreeOTP] (Android, iOS), [https://github.com/andOTP/andOTP#andotp----android-otp-authenticator andOTP] (Android), [https://mattrubin.me/authenticator/ Authenticator] (iOS), [https://authenticator.cc/ Authenticator.cc] (Chrome, Firefox & Edge), [https://passman.cc/ Passman] (NextCloud), [https://keepassxc.org/ KeePassXC] (Linux, macOS, Windows)</span>

** <span lang="en" dir="ltr" class="mw-content-ltr">Closed-source: [https://authy.com/download/ Authy] (Android, iOS, macOS, Windows), [[:w:en:Google Authenticator|Google Authenticator]] ([https://play.google.com/store/apps/details?id=com.google.android.apps.authenticator2&hl=en_GB Android] [https://itunes.apple.com/gb/app/google-authenticator/id388497605?mt=8 iOS])</span>

** <span lang="en" dir="ltr" class="mw-content-ltr">[[:w:en:Special:PermaLink/884895095#Authenticated_implementationsComparison_of_OTP_applications|otherGeneral clientscomparison comparedof atmany Englishcommon WikipediaOTP applications]] which could be used as TOTP client for 2FA (English Wikipedia)</span>

** <span lang="en" dir="ltr" class="mw-content-ltr">You can also use a desktop client such as the [https://www.nongnu.org/oath-toolkit/ OATH Toolkit] (Linux, macOS via Homebrew), or [https://github.com/winauth/winauth WinAuth] (Windows). Keep in mind that if you log in from the computer used to generate TOTP codes, this approach does not protect your account if an attacker gains access to your computer.</span>

** <span lang="en" dir="ltr" class="mw-content-ltr">Password managers such as 1Password, LastPass, and KeePass also tend to support/have plugins to support TOTP. This bears the same limitations as the above, but may be worth looking into if you already use one for other things.</span> [[{{lm|OATHAuth enable link|png}}|thumb|<span lang="en" dir="ltr" class="mw-content-ltr">Overview of preferences section to enable two-factor authentication.</span>]]

* <span lang="en" dir="ltr" class="mw-content-ltr">Go to [[Special:OATH]] '''on the project you hold one of the above rights on''' (this link is also available from your [[Special:Preferences#mw-prefsection-personal|preferences]]). ''(For most users, this will not be here on the meta-wiki.)''</span>

* <span lang="en" dir="ltr" class="mw-content-ltr">[[Special:OATH]] presents you with a [[{{lwp|QR code}}|QR code]] containing the '''Two-factor account name''' and '''Two-factor secret key.''' This is needed to pair your client with the server.</span>

Line 148:

<div lang="en" dir="ltr" class="mw-content-ltr">

Please note, most of the directions on this page are specific to the TOTP method. The [[{{lwp|WebAuthn}}|WebAuthn]] method is more experimental and currently has no recovery options (c.fcf. [[phab:T244348|related developer task]]).

</div> <span lang="en" dir="ltr" class="mw-content-ltr">WebAuthn has a known issue that you must make future logons on the same project that you initiate it from ([[phab:T244088|tracking task]]).</span>

Line 156:

<div lang="en" dir="ltr" class="mw-content-ltr">

* The [[:w:en:Multi-factor authentication|Englishconcept Wikipediaof articlemulti-factor authentication]] in the english Wikipedia and a [[d:Q7878662|Wikidata item]] about the concept of multi-factor authenticationit

* [https://phabricator.wikimedia.org/tag/mediawiki-extensions-oathauth Known bugs and requested improvements] of Wikimedia's two-factor authentication are collaborated on and tracked in Phabricator.

* [[mw:Special:MyLanguage/Extension:OATHAuth|OATHAuth]] is the MediaWiki extension used for this functionality

* [[mw:Wikimedia Security Team/Two-factor Authentication for CentralAuth wikis|Wikimedia Security Team/Two-factor Authentication for CentralAuth wikis]]