Page MenuHomePhabricator

Emphasise importance of scratch tokens
Open, HighPublic

Description

From T172079#3573986

2FA was "sold" to me as an essential upgrade that all admins must have, but the "simple" page through which I got it, is seriously lacking sufficient detailed explanation and OBNOXIOUSLY LOUD warnings about the consequences of losing the keys.

https://en.wikipedia.org/wiki/Wikipedia:Simple_2FA#Emergency_tokens_:_IMPORTANT.2C_read_this

Event Timeline

Reedy created this task.Sep 4 2017, 1:49 PM
Restricted Application added a subscriber: Aklapper. · View Herald TranscriptSep 4 2017, 1:49 PM
mxn added a subscriber: mxn.Nov 6 2017, 6:22 AM

Give users a prompt on a timer stating users should save their backup codes or like i do for some of my applications only allow them to continue the 2FA setup if you detect they pressed the download button
Also dont forget to give massive warning texts they should be big and bold so users notice them and dont spam next

Reedy triaged this task as High priority.Sep 10 2019, 7:29 PM