We’ve rolled out Two-Factor Authentication for Vivaldi accounts and a new reputation system for Vivaldi Webmail access.

[ybjrepnfr]

the blog start says

New updates to key Vivaldi Community services bring a new level of security to your Vivaldi accounts, will help us keep a lid on some very determined spammers

can i just get clarification, to ensure i understand this initiative? the anti-spamming aspect of this initiative is only wrt misuse of webmail, is it? not also somehow the forum? i ask coz everyone who has been in the forum for any non-trivial length of time, unfortunately knows that now & then, posts appear that are overtly or covertly spam. i was struggling to see how this initiative assists to prevent that. however, it now seems that's not the intention, but instead it's to protect webmail integrity. or, am i still missing the point? [i don't even pretend to understand spammers & scammers, so i might have this all wrong].

[aldaviva]

Submitted update to https://2fa.directory/ - https://github.com/2factorauth/twofactorauth/pull/7568, merged already.

[luetage]

@ybjrepnfr Only webmail. There is no prerequisite to joining the forum. The phone number sign up apparently didn’t stop the influx of bad actors.

[isak]

@tzic should be fixed now, sorry about that.

[DoctorG]

I expect Passkeys as it is was added to Chrome working here for Vivaldi services in near future!?

[far4]

That's a good thing. But I am alarmed by the poor quality of automatically generated passwords for applications. There are 3-4 pairs of the same ones per 25 characters. There are even three identical ones. Please, this needs to be improved!
And I hardly should have used obsolete sha1 in the code generator! Even my app pointed out that this is a weak security method. Why don't you opt for reliability right away?

And one more suggestion. Vivaldi mail supports pgp encryption. I think that receiving encrypted notifications about account security events would improve the quality of service. At the same time, you can create another layer of protection when changing user's pre-selected data (passwords, 2fa, account deletion) requires an encrypted email with a verification code inside.

[DoctorG]

@far4 said in We’ve rolled out Two-Factor Authentication for Vivaldi accounts and a new reputation system for Vivaldi Webmail access.:

Vivaldi mail supports pgp encryption

Comes next

[burnout426]

@rseiler Same here. My session expires too soon. I haven't tested the exact time, but it does seem like it only last a week at the most.

[Melvidor]

Can I generate new batch of Recovery Codes, once I used all 3?

[luetage]

@Melvidor As long as you have access you should be able to generate new ones.

[gardenhere]

Several questions after activating 2FA with security key and TOTP. I had to login again on another computer and it did not have the option to use TOTP but only security key. Does this mean I have to use security key all the time? Will I lose access to my account if I lose the security key?

Does the security key or TOTP work with webmail?

Thanks

[Videonas]

@jane-n I'm having the same issue. I have a nitrokey 3A. I tried adding it to my account. I get to enter my pin, I need to touch it. After that, nothing. I've waited a while to get the pop-up to name it, I've tried on a Linux device, on a Windows machine, on Vivaldi browser and on Firefox (both on Linux and windows). Never saw the pop-up to name my key. When going to my account, it isn't added (I don't see it listed).

[Ja27CS2g]

@Team_Vivaldi Is this 2FA actually needed? I use a personal private computer do I really need this for this Platform? I use the 2FA on other platforms because of past security issues.

[tzic]

@isak Thank you for a fast response. Now it should be ok.
Tnx.

[tonci.razmilic]

@jan-ripper I have the same problem.

[pauloaguia]

@Ja27CS2g said in We’ve rolled out Two-Factor Authentication for Vivaldi accounts and a new reputation system for Vivaldi Webmail access.:

Is this 2FA actually needed?

You don't need to use it if you don't want to. But for people who have sensitive information in their Vivaldi's webmail account or for forum moderators, for example, it might be a good option to have it.

It was being requested for more than 4 years: https://forum.vivaldi.net/topic/33950/two-factor-authentication-scheme-for-vivaldi-net-account (you can see in that topic some of the reasons why some people felt it was needed).

[Bononi.Gustavo]

@thomasp Same problem

[cedricdes]

2FA for the browser sync function? Does it mean that, if enabled, we would be requested to enter the 6-digit code when setting up sync at first install of Vivaldi browser on a device?

[sev7en]

Lot of good news, safety first!

[DoctorG]

What do You use now for 2FA here: hardware key or authenticator app?
Tell us which product and if that worked.