Multi Factor Authentication (Login Security) / Authentification à deux facteurs
complete
T
Tom
Would be nice to see multi factor authentication option for admin accounts to ensure better security of the accounts.
Log In
T
Tanya
complete
Hello all! 2FA is now available. Consult the link to learn how to set it up: https://support.zeffy.com/activating-two-factor-authentication-on-your-account
Thank you for your votes and comments!
J
Joanna
This is great progress, thank you!
Are other multi-factor authentication options on the roadmap? My preferred method is time-based one-time password (TOTP). Would love to see that someday.
Rowan from Zeffy
in progress
Rowan from Zeffy
Rowan from Zeffy
planned
Rowan from Zeffy
Merged in a post:
Two-Factor Authentication (Login Security)
J
Jeremy
Please add some kind of multi-factor authentication to provide an additional layer of security to our Zeffy profiles. It would be terrible if someone were able to get access to an account and redirect funds to another bank account with little resistance.
A
Aaron
This is not optional. Requiring 2-factor is really basic security 101. We link our payment and banking info here and this site is a ripe target for hackers when there is no 2-factor. Just ask 23andMe how it worked out for them when they didn't require 2-factor!
TOTP is a very simple to implement IETF standard that has been in place since 2011 (RFC 6238). This isn't new, this isn't complicated, and this isn't unimportant. In 2024, a financial site not having MFA amounts to negligence and exposes this service to criminal negligence lawsuits in the event of a breach.
It is not reasonable or acceptable to put this off any longer. The initial request was mad here back in 2022.
M
Maryse from Zeffy
Merged in a post:
Passkeys and/or MFA - Chaves de acesso e/ou MFA
P
Peter V
I'd love Zeffy to beef up its website security with Passkeys or MFA. We're storing sensitive data such as bank account details and donor data that should be protected.
Eu adoraria que a Zeffy reforçasse a segurança do seu site com chaves de acesso ou MFA. Armazenamos dados confidenciais, como detalhes de contas bancárias e dados de doadores, que devem ser protegidos.
V
Valera
I am so surprised this hasn't been implemented yet. It's not a "feature" but a security liability!
M
Maryse from Zeffy
Merged in a post:
Implement passkeys / mettre en œuvre les clés de sécurité
P
Peter V
Implement passkeys for logging into Zeffy. And MFA while you're at it, please and thank you. Makes me feel that Zeffy is more secure, especially with our organization's banking information saved here.
Implémentez des clés d'accès pour vous connecter à Zeffy. Et MFA pendant que vous y êtes, s'il vous plaît et merci. Cela me donne l'impression que Zeffy est plus sécurisé, en particulier avec les informations bancaires de notre organisation enregistrées ici.
D
Devin
100%, it's a baseline security control these days! Either this or a Single-Sign On option so we can use our identify access controls from another provider.
Load More
→