User Story:
As a user, I can access clear and concise documentation related to Wikimedia’s 2fa implementation and available options.
Description
Description
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Open | None | T399644 FY2025-26 WE4.6.2 Multiple Authenticators | |||
| Resolved | TBurmeister | T399657 Update existing 2FA documentation | |||
| Resolved | TBurmeister | T399656 Clearly document 2FA reset process | |||
| Open | None | T255370 Document best practices for user login for different types of applications if using 2FA | |||
| Resolved | TBurmeister | T409768 Standardize 2FA terminology usage across docs and UI | |||
| Resolved | TBurmeister | T192260 Add a link to help page on all two-factor authentification process steps |
Event Timeline
Comment Actions
x-posting here just for tracking work done on docs this quarter: @Catrope made significant updates to https://www.mediawiki.org/wiki/Extension:WebAuthn. Summary: "adding a recipe for setting up HTTPS in local development entirely within MW-Docker (without needing to install Caddy locally), and updating the section on cross-wiki usage to be more accurate. Documentation on how to set up a central domain like auth.wikimedia.org in a third-party context is still missing, but it's hard for me to write that because that particular feature in CentralAuth doesn't appear to be well-documented, and doesn't really seem to be designed for non-WMF use either."
Comment Actions
If it helps, please refer ja:H:2FA. It is already updated for new 2FA system.
It could be a basis to rewrite other documents.
Comment Actions
https://meta.wikimedia.org/wiki/User:TBurmeister_(WMF)/Sandbox/2FA is now a final draft, with just a couple small TODOs left (I've opened threads about with the team to resolve). Feedback on this draft is welcome as comments on this task, or on the Talk page.
Comment Actions
I love it.
Instead of "non-temporary user accounts", I think it's better to say "registered user accounts", simply.
Comment Actions
https://meta.wikimedia.org/wiki/Help:Two-factor_authentication has now been fully rewritten to reflect the current state of 2FA on Wikimedia projects, and it includes additional troubleshooting information about account recovery and disabling or re-enabling 2FA.