Problem: Currently 2 factor authentication is by default only available to users with elevated user rights, like sysops. This is due to multiple unsolved usability problems that caution us
Who would benefit: Registered users
Proposed solution: Solve the usability options and improve account recovery process.
Personally I don't forsee this happening, allowing anyone to enable 2fa could cause operations having to reset forgotten 2fa credentials constantly, for example if someone were to lose their scratch codes (which I've done before on wikitech) its a task that while may not to be hard, would get annoying and cause a lot of potiental extra work for the already busy operations team Zppix (talk) 17:40, 8 November 2017 (UTC)Reply[reply]
Solving this, would indeed require that ops people are no longer required for a reset, simply because there is no UI to modify this part of the database. When you reset is rules that we will have to define. We could have a group with checkuser abilities for that for instance. Or require at least email verification + password verification, or submitting evidence to OTRS. There's options. —TheDJ (talk • contribs) 08:11, 9 November 2017 (UTC)Reply[reply]
This can be solved for some of the users by using proofs like in Keybase. Probably several systems should be used to revoke a 2-factor authentication setup, but I'm not sure how this should be done. Only thing I do know; don't rely on SMS alone for a revoke! — Jeblad 23:50, 10 December 2017 (UTC)Reply[reply]
Support This would probably be a long time run, but the result will be worth the efforts spent. Vachovec1 (talk) 20:23, 27 November 2017 (UTC)Reply[reply]
Support This probably won't pass, but I'm supporting it. Also, please note I put my name on the RFC. Cocohead781 (talk) 03:11, 6 December 2017 (UTC)Reply[reply]
Support Support as an optional choice for non elevated user. -glove- (talk) 16:12, 6 December 2017 (UTC)Reply[reply]
Support I support this proposal for any account with any nonautomatic rights attached (rollback, review, pending changes, etc). Dolotta (talk) 19:37, 7 December 2017 (UTC)Reply[reply]
Support This would probably be a long time run, but the result will be worth the efforts spent. Vachovec1 (talk) 20:23, 27 November 2017 (UTC)
Strong support — Arkanosis ✉ 15:14, 28 November 2017 (UTC)
