We currently use yellow warning boxes in the 2FA login UI to tell people what to do, but we shouldn't. We should also revise the copy here.
New designs from @AAlhazwani-WMF:
| Security key | Authenticator app | Recovery code |
| Catrope | |
| Oct 3 2025, 7:48 PM |
| F66724546: image.png | |
| Oct 3 2025, 7:50 PM |
| F66724535: image.png | |
| Oct 3 2025, 7:48 PM |
| F66724531: image.png | |
| Oct 3 2025, 7:48 PM |
| F66724526: image.png | |
| Oct 3 2025, 7:48 PM |
| F66724521: image.png | |
| Oct 3 2025, 7:48 PM |
We currently use yellow warning boxes in the 2FA login UI to tell people what to do, but we shouldn't. We should also revise the copy here.
New designs from @AAlhazwani-WMF:
| Security key | Authenticator app | Recovery code |
I think we should revise the design for authenticator apps to keep the current list of example authenticator apps, because we've received a lot of feedback that people find those useful. This information shouldn't be in a warning box of course, but I think it should be somewhere.
Probably it should point to some list on mediawiki.org or elsewhere rather than being namedropped in the message directly and thus hard to change in a cross-language way, should a particular authenticator die or be renamed. I've thought to do that with the list currently splattered in that same spot.
And it's noisy once you're used to using 2FA.
But yeah, it's always been weird to me that it's a warning box.