Page MenuHomePhabricator

Reword 2FA login messages, remove warning box
Open, Needs TriagePublic

Assigned To
None
Authored By
Catrope
Oct 3 2025, 7:48 PM
Referenced Files
F66724546: image.png
Oct 3 2025, 7:50 PM
F66724535: image.png
Oct 3 2025, 7:48 PM
F66724531: image.png
Oct 3 2025, 7:48 PM
F66724526: image.png
Oct 3 2025, 7:48 PM
F66724521: image.png
Oct 3 2025, 7:48 PM

Description

image.png (257×332 px, 14 KB)

We currently use yellow warning boxes in the 2FA login UI to tell people what to do, but we shouldn't. We should also revise the copy here.

New designs from @AAlhazwani-WMF:

image.png (292×348 px, 14 KB)
image.png (198×215 px, 10 KB)
image.png (173×216 px, 11 KB)
Security keyAuthenticator appRecovery code

Event Timeline

I think we should revise the design for authenticator apps to keep the current list of example authenticator apps, because we've received a lot of feedback that people find those useful. This information shouldn't be in a warning box of course, but I think it should be somewhere.

image.png (327×332 px, 27 KB)

Probably it should point to some list on mediawiki.org or elsewhere rather than being namedropped in the message directly and thus hard to change in a cross-language way, should a particular authenticator die or be renamed. I've thought to do that with the list currently splattered in that same spot.

And it's noisy once you're used to using 2FA.

But yeah, it's always been weird to me that it's a warning box.