Secure master account and every vault with additional 2FA

[jbemener]

I would really love to see 2FA being enabled for the master account/authentication. In my opinion the weakest link is at the vaults and at the master password being not further protected by two/multi factor auth.

Please add this feature

Thanks

[Garima Singh]

Hey @jbemener

Welcome to forum!

The request has been noted and shared with the team. If you have any further queries, please feel free to revert us. Thanks!

[Daz]

This is definitely a big thing for me. I really want to see more security options when it comes to the Enpass account.

For instance 1Password to login requires both the master password and a secret key (which is randomly generated and I believe can be regenerated if need be). I’d like to see something like this with Enpass.

[DL444]

In my opinion, this is a rather important feature to have, since Enpass is now recommending users to store TOTPs in the vault alongside the passwords.

Without 2FA for vault access, unauthorized parties will gain access to account credentials and TOTPs at the same time if the master password is compromised, which defeats the purpose of TOTP-based two factor authentication.

Having two factor authentication for vault access ensures that 2FA set up for other sites is still "two factor".