Nextcloud s Two Factor Authentication

on YouTube ↗04m

" summary

Nextcloud currently supports U2F USB keys (plug‑in, push button; secure but requires buying a key), TOTP apps (shared secret with smartphone, time‑based one‑time codes), and a new Gateway SMS/Telegram provider that sends codes but is labeled a technology preview and not recommended for production. Admin tooling gains include an occ command to check who has 2FA, new admin controls for enforcement, and work to make fallback and failure handling more robust in upcoming 14/15 releases.

AI-written summary · about

" chapters (5)

1. 0:00Start
2. 0:51What is Two-Factor Authentication?
3. 1:21Time-Based One-Time Password
4. 2:03Messaging Gateway
5. 2:39Current and future work

" related talks

• 17m2FA in 2020 & BeyondKelley Robinson · GOTO Chicago 2020
• 04mSecurity inLukas Reschke · Nextcloud Conference 2016
• 50mA tale of two sides of 2FAChristine Seeman · NDC London 2020
• 25mAuthentication Beyond SMSKelley Robinson · PasswordsCon 2018 Stockholm
• 24m2FA in 2020 and BeyondKelley Robinson · BSidesSF 2020
• 01h 28mHow to 2FA-enable Open Source ApplicationsMike Schwartz · Open Source 101 at Home 2020
• 22mA Usability Study of Five Two-Factor Authentication MethodsJonathan Dutson · SOUPS 2019
• 12minterviewed – Rich SmithRich Smith · O'Reilly Security Conference 2017 - New York, NY