Two Factor Authentication Scheme for Vivaldi.net Account

diogoacs

Also, the use of those auth apps.

Pesala

@diogoacs This seems to be a request for the Forum, not for the browser.

ROTFL

@Pesala IMO it could be about both of them.
Vivaldi.net account is used to Sync.

pauloaguia

@Gwen-Dragon said in Two Factor Authentication Scheme for Vivaldi.net Account:

Then add an extra Feature Request for the browser.

I don't think you can do one without the other. Since, like @ROTFL pointed out, the same account is used in both the forum and the browser, if 2 factor authentication is ever implemented it should be at the account level - if I configure my account for 2FA, then any attempt to authenticate using just username and password should fail, even if it comes from a different environment

Dingo

So are we going to actually ever get this? With all the data breaches going on these days I can't help but feeling vulnerable using anything that doesn't have two-factor available.

ra-mon

@Gwen-Dragon said in Two Factor Authentication Scheme for Vivaldi.net Account:

FYI: state adding this to Vivaldi community: Abandoned.

Sad news... but check CW-1081 :face_savouring_delicious_food:

rrk

@ra-mon What is CE-1081? Does this mean 2FA won't be implemented, ever?

thomasp

Looks like there was some confusion on @Gwen-Dragon's part with regards to the issue states in the CW project. 2FA has not been abandoned, just one ticket was marked as a duplicate of another. CW-1081 is the open ticket for implementing 2FA.

rrk

@thomasp Oh. Thank you.

Primokorn

I'm a new user of Vivaldi and I noticed this morning that I have an email account
Since emails is a security key point I'd also appreciate 2FA.

The bug tracker is not public so any news on this request?
Thank you.

clrush

I assume if there were updates they'd have been posted already, but I can't help myself - any word on this? MFA is such a critical security feature!
Thank you

dlgard

So any word on 2 factor authentication? or least some kind of notification system whenever somebody logs into your Vivaldi Account? These are kind of essential these days.

chilli10

Still 2FA not implemented keeps us wondering what takes so long for this common feature nowadays? Is V not so concerned about security or 2FA really is vulnerable?

Gneno

@Gwen-Dragon Thank you for your Work towards letting the 'Public' know about 2FA. Me is also waiting for it to be available!

getraf

I'm also waiting for 2FA / MFA before I depend on my Vivaldi account for anything serious. I'm watching this thread for any updates and would love to upvote the security request if I'm able to somehow.

guigui3000

Yep, I would also like to add my +1 for 2fa to secure our Vivaldi accounts.

EarlDaniels

This needs to happen. Soon. I am questioning the chance I am taking having any of my passwords sync'ed with no 2FA. I won't use Vivaldi for banking or my primary email due to this.

I Love this browser, however one breech and all the greatness is null and void - all the enjoyment of this otherwise better browser is wiped out with an order of magnitude more anguish.

I would contribute my coding abilities, except the only current language that I keep any proficiency is PHP - probably not very helpful...

Is there any other way I can help? I could track down and evaluate code libraries, although I doubt that would help much.

I could beta test and test and test. I'm the "better idiot" that proves nothing in completely "idiot proof"!

Other than existing security issues that come to light, I cannot see how anything else could be a higher priority.

pauloaguia

@earldaniels said in Two Factor Authentication Scheme for Vivaldi.net Account:

This needs to happen. Soon. I am questioning the chance I am taking having any of my passwords sync'ed with no 2FA. I won't use Vivaldi for banking or my primary email due to this.

Sync is actually the only thing that has two factor authentication already. There's vivaldi.net's password to access the account and then the decryption password to decrypt the information sent by sync.
Unless you configure Vivaldi to memorize both and not ask for them, of course, then all anyone else needs is access to your browser (just like when you configure 2fa for your GMail acount but then set your phone or browser never to ask you for your password again - your back to 1fa: needing access to your device).

DoctorG

@pauloaguia said in Two Factor Authentication Scheme for Vivaldi.net Account:

Sync is actually the only thing that has two factor authentication already. There's vivaldi.net's password to access the account and then the decryption password to decrypt the information sent by sync.

You misunderstand.
Vivaldi Sync does not have 2FA (Two Factor Authentication).

The Vivaldi Sync server does not sent a decryption password to you. It sends encrypted sync data to your PC and uses the Sync encryption password (which is always stored local on your PC) to decrypt data locally.

pauloaguia

@doctorg said in Two Factor Authentication Scheme for Vivaldi.net Account:

The Vivaldi Sync server does not sent a decryption password to you. It sends encrypted sync data to your PC and uses the Sync encryption password (which is always stored local on your PC) to decrypt data locally.

You described my understanding perfectly
I never said Vivaldi sends you either of those passwords. I still think that this is 2FA - in this case, 2 "something you know"'s. But I'm always open to arguments otherwise
It's actually more 2FA than GMail, for instance, which uses "something you know" and then "something they send you"

Maybe this article helps clarify 2 step validation vs 2 factor authentication? https://www.techradar.com/news/two-factor-authentication-vs-two-step-verification-youve-probably-missed-this-tiny-difference