Add two-factor authentication (2FA) for admin accounts | Voters

Add two-factor authentication (2FA) for admin accounts

Mike Unverferth

Many sites offer an enhanced security option of two-factor authentication to protect against theft of login credentials. This should be available for both admin and user accounts especially if funding sources such as bank accounts or credit cards are retained.

April 2, 2020

Julia Rhodes

Merged in a post:

Multifactor Authentication

Patrick Burch

Multifactor authentication like Google Auth or other OTP. Especially for admins.

August 21, 2023

Michael Coyne

Individual users can opt-in for 2FA via their profile. The request is that this be made mandatory for users with selected access permissions (or at least have a way of checking which admins have not opted-in).

Office KBC

Yes, would be super helpful to be able to enforce 2FA for selected Access Permissions.

Or at the very least, have it enforced for Super Admins.

Jon Bradley

Yes, this is essential to any online service. Need app and sms, and the enforcement of MFA needs to be enforceable for all admins by organization level / super admin.

Allen Schmutzler

Yes, security is important

Matthew Penn

Very critical feature request.

Kelly Peavey

This is really a must have, and don't rely on SMS as your only option. That is only slightly better than nothing at all. Ideally, you would provide for a physical token option (like Yubikey), but at the very least an authentication app. Thank you.

Trey McCallie

This is critical and should be an absolute requirement for an application that deals with financial data! Church workers are notorious for bad and/or shared password management. This data would be a gold mine for a bad actor. We almost didn't select this platform because of lack of MFA. Churches are one admin's phished password away from giving up all their users' data.

Adam Barry

Thanks for the feedback Patrick Burch. We'll consider this for future features.