Two factor authentication

Improvements
1

Hey Josh and others,

Are there any plans for two factor authentication login in the near by future?

3 Likes
2

I started work on a branch (see github), but I don’t have any plans to wrap it up any time soon.

3 Likes
3

Oh cool, I like how you’ve started to implement 2-factor in both the admin interface and configuring Dovecot to auth against the API so that IMAP or whatever can support 2-factor too.

I wonder, are there any examples out there of a non-proprietary mail solution that supports 2-factor? Nowadays 2-factor is a no-brainer for an account as critical to security as your email account, but all the established open source mail software pre-dates that idea by many, many years.

4

I’m definitely for a 2 factor option as well & the codes work great based on google’s open source implementation.

5

Just thought I’d revisit this and inquire about this roundcube plugin that seems to be frequently downloaded, updated and on github for someone with knowledge to inspect & possibly incorporate.

https://plugins.roundcube.net/packages/alexandregz/twofactor_gauthenticator

Thanks again, @JoshData. My MailInABox is going strong and can’t see myself without it - your work here and the work you do as mentioned by John Oliver is appreciated.

6

@K87RRR6r6 Thanks. There’s no point to having 2FA enabled only for some services on the box and not others (SMTP, IMAP, the admin panel, and several others), so I don’t think a Roundcube plugin would add any security.

1 Like
7

Ah! Great point. Sorry I didn’t think through that.