Help:Two-factor authentication/gl: Difference between revisions

Revision as of 20:04, 10 March 2025

Latest revision as of 10:58, 23 May 2025

(10 intermediate revisions by the same user not shown)

Line 24:

=== Mandatory use user groups ===

</div>

* <span lang="en" dir="ltr" class="mw-content-ltr">[[:Category:Global userUser groups that require two-factor authentication|Groups requiring two-factor authentication]]</span>

* <span lang="en" dir="ltr" class="mw-content-ltr">May 2025 announcement: [[Special:MyLanguage/Mandatory two-factor authentication for users with some extended rights|Mandatory two-factor authentication for users with some extended rights]]</span>

{{user groups}}

<div lang="en" dir="ltr" class="mw-content-ltr">

Line 32:

* <span lang="en" dir="ltr" class="mw-content-ltr">Have <code>(oathauth-enable)</code> access (by default, available to administrators, bureaucrats, suppressors, check users and other privileged user groups)</span>

* <span lang="en" dir="ltr" class="mw-content-ltr">Have or install a [[:w:en:Time-based One-time Password Algorithm|Time-based One-time Password Algorithm]] (TOTP) client. For most users, this will be a phone or tablet application. Any compliant application maybemay be used, some popular oneones include:</span>

** <span lang="en" dir="ltr" class="mw-content-ltr">Open-source: [https://github.com/beemdevelopment/Aegis Aegis] (Android, F-Droid), [https://freeotp.github.io/ FreeOTP] (Android, F-Droid, iOS), [https://github.com/twofas 2FAS] ([https://github.com/twofas/2fas-android Android], [https://github.com/twofas/2fas-ios iOS]), [https://bitwarden.com/products/authenticator/ Bitwarden Authenticator] ([https://github.com/bitwarden/authenticator-android Android], [https://github.com/bitwarden/authenticator-ios iOS]), [https://github.com/andOTP/andOTP#andotp----android-otp-authenticator andOTP] (Android), [https://mattrubin.me/authenticator/ Authenticator] (iOS), [https://authenticator.cc/ Authenticator.cc] (Chrome, Firefox & Edge), [https://passman.cc/ Passman] (NextCloud), [https://keepassxc.org/ KeePassXC] (Linux, macOS, Windows)</span>

** <span lang="en" dir="ltr" class="mw-content-ltr">Closed-source: [[:w:en:Google Authenticator|Google Authenticator]] ([https://play.google.com/store/apps/details?id=com.google.android.apps.authenticator2&hl=en_GB Android] [https://itunes.apple.com/gb/app/google-authenticator/id388497605?mt=8 iOS]) and authenticator apps from most other large tech firms</span>

** <span lang="en" dir="ltr" class="mw-content-ltr">[[:w:en:Comparison of OTP applications|General comparison of many common OTP applications]] which could be used as TOTP client for 2FA (English Wikipedia)</span>

Line 45:

{{Caution|1=<span lang="en" dir="ltr" class="mw-content-ltr">WARNING: You will also be presented with a series of 10 one-time [[#Recovery codes|recovery codes]]. '''You should print and safely store a copy of this page'''. If you lose or have a problem with your TOTP client, you will be locked out of your account unless you have access to these codes.</span>}}

{{clear}}

<div lang="en" dir="ltr" class="mw-content-ltr">

== Logging in ==

Line 139 ⟶ 138:

<div lang="en" dir="ltr" class="mw-content-ltr">

Please note, most of the directions on this page are specific to the TOTP method. The [[{{lwp|WebAuthn}}|WebAuthn]] method is more experimental and currently has no recovery options (cf. [[phab:T244348|related developer task]]). WebAuthn has a known issue that you must make future logons on the same project that you initiate it from ([[phab:T244088|tracking task]]). WebAuthn is not currently available for use via mobile apps ([[phab:T230043|T230043]]).

</div>

</div> <span lang="en" dir="ltr" class="mw-content-ltr">WebAuthn has a known issue that you must make future logons on the same project that you initiate it from ([[phab:T244088|tracking task]]).</span>

<div lang="en" dir="ltr" class="mw-content-ltr">

Line 154 ⟶ 153:

</div>

{{user groups}}

[[Category:Security]]

[[Category:Security{{#translation:}}]]

[[Category:Handbook Wikimedia-specific]]