All Questions
3 questions
0
votes
0
answers
109
views
How could one use multi-factor authentication to derive a static secret key?
Scenario:
The setup is that each user has a randomly generated key A used for encrypting data stored on the server and a password-derived key B used to store A on the server without the server getting ...
- 647
1
vote
3
answers
3k
views
What is the best practice for resetting multi-factor when a user requests to recover their password?
I am in the process of developing a web-application which requires MFA on every login. (On the first login, before you can do anything, you are forced to setup MFA. Due to monetary restrictions and ...
- 9
14
votes
2
answers
13k
views
How does password reset work if 2FA is enabled?
(There is a highly related question, however I believe mine is not a duplicate, since it deals with resetting a password without access to the account, not changing it while being logged in.)
Say ...
- 5,231