We should have the 2FA login and security key setup steps to secure our wpfolks login.
As a reference, we can follow the WordPress.org “Account & Security” tab.
Thanks for raising this, and to everyone who upvoted.
You’re right, account security should be solid, especially as WPFolks grows and more is tied to your profile. I’m adding 2FA to the build queue.
Plan: start with authenticator app (TOTP) support and backup codes in an Account & Security tab, similar to WordPress.org. Security key and passkey support will follow.
Will update this ticket when it ships.
2FA login is now shipped on WPFolks.
You can now set up 2FA login and a security key to secure your account. The setup steps follow the same pattern as the WordPress.org Account and Security tab, so it should feel familiar.
This is a critical security feature, so I want to roll it out carefully before announcing it to everyone.
If you are willing to help test, please try setting up 2FA on your own account. If anything goes wrong and you get locked out, let me know and I can disable it from my side for your account.
Once I have 2 to 3 confirmations that setup and login are working smoothly, I will announce it officially for all users.
Thank you
