Suggestion: Adding Optional 2FA (Two-Factor Authentication) for Forum Accounts

[HzAnalyst]

Hi Chief and Moderators,

While registering and setting up my options, I noticed that the forum currently doesn't support Two-Factor Authentication (2FA) for user accounts.

Given that many hardware and gaming forums have recently been targeted by credential stuffing attacks, adding TOTP-based 2FA (like Google Authenticator or Authy) would significantly boost the security of our community. Since this forum runs on phpBB, utilizing an extension like "Two Factor Authentication" would be a fantastic addition to protect high-profile member accounts and contributors.

Could the administration team consider adding an optional 2FA feature to the User Control Panel (UCP) in a future update?

Thanks for maintaining such an incredible community!

[Chief Blur Buster]

Thanks for the suggestion! The main mechanism we're considering is optional 3rd party connect (e.g. Google, Apple, Microsoft), and those have built-in 2FA options. But the TOTP is another idea.