We're using an add-on from Xon called Password Tools. If a member has a password that is determined to be too weak, the system automatically enables 2FA for their account. When the user tries logging in next, they are told: "An email has been sent to {email} with a single-use code. Please enter that code to continue" (the XF phrase displays their account email address). Half the time, the members have an email address on file that they no longer use or even have access to, so I'll get...
Read more
Continue reading...
Read more
Continue reading...