Two factor authentication

[darrenings]

Any plans to allow two-factor authentication with something like Google Authenticator?

[Seth]

I haven't considered that one, but I did buy two YubiKeys a while back to play with.

[darrenings]

Seems after Heartbleed this week, everyone's pushing two-factor authentication now...

[minsk]

What about using SMS?
http://www.twilio.com/docs/howto/two-fa ... entication

[Seth]

I've recently added YubiKey support to both webmail clients since there's no cost to support it.

It's very early stage right now since we wanted to get something working to work with it ourselves. One drawback is that it needs to be activated in both webmail clients manually. We'll need to either add a hook to prohibit login to the other webmail client if one has YubiKey enabled, or sync between the two somehow. We also want to add an option to the account control center to turn off normal IMAP/POP3 access from locations other than webmail since standard IMAP .

[sgrayban]

Well it's been a few years since this was posted about using Yubikey -- Can this be enabled for my account?

[sgrayban]

Hello??? Doesn't staff answer anyone one especially when we are paying customers?

[Seth]

Yubikey can be enabled in Roundcube webmail under Settings -> Server Settings

For the account control center email your key IDs to support@rollernet.us with your account name.