Add support for webauthn authentication, Yubikeys and the like
已完成
Webauthn is soon here, and with it comes a passwordless future. The new FIDO2 standard alongside other hardware backed authenticators are replacing the old FIDO U2F that only had bindings in Google Chrome, promising great interoperability.
Please add support for FIDO2 authenticators for use with two factor authentication. The obvious way to implement webauthn in Discord would be by allowing users to add their tokens as a second authentication factor.
Currently there are only a few FIDO2 authenticators on the market, including the Yubico Security Key and the Yubikey 5 Series. It also seems that Touch ID and Face ID can be used with Webauthn on Apple devices. As the market develops, the higher assurance provided by webauthn can be utilised in more depth.
edit on 7.3.2019:
Google with the FIDO alliance recently announced that Android upwards from 7.0 will become 'FIDO Certified' through a Play Services update. This means that many many devices fingerprint sensors can soon be used for Webauthn authentication. The update also brings support for external authenticators, where applicable.
-
Still nothing from Discord 3 years later. It's not a difficult feature to implement to vastly improve the security of their platform... Why not even a sound from them? Obviously, they care about adding useless functionality to Nitro instead of core security features...
1 -
If they add it, they'll add it to Nitro Super Mega Ultra ++++ for 1000$ per month (inflation adjusted in 2021, when they implement it in 50-100 years). Sad that discord isn't open source. I would add it.
0 -
Efinder, you make a good point byut afaik it is very possible the stabtard is open source but since its a big security leap it may be hard to get something working niceley
0 -
Would be really nice to see this finally getting added to Discord. Potentially even YubiKey OTPs
1 -
We need this please!!
1 -
https://webauthn.guide/ is a good resource for getting started with the API!
0 -
Simply stop using services you are not satisfied with - the power of customers should not be underestimated.
0 -
7wells- discord will eventually learn and add it: then they just need to make the tokens not bypass 2fa ubless its same device
0 -
BUMP!
Discord should really add support for webauth, its been 3 years already and nothing...
0 -
Bump
We really need this extra layer of security
0 -
when will discord allow us to add the yubikey to our account
1 -
How is this still not a thing? I'm doing my end of year decluttering of accounts, 2/3 of those I had on Google Authenticator I could finally remove because they now support U2F and options to only use U2F without any other backup and Discord is still sitting there. Please add U2F, user account security should not be this much of a struggle for us to get.
0 -
This is also very important for me. Please add it <3
0 -
Disappointing to see this posted 3 years ago and zero action from Discord.
Security improvements should be prioritised.0 -
Hi, today i noticed that Discord doesn't have support for my yubikey, which would improve the account security damatically. Can you imagine how disappointed i was, this feature is now requested for over 3 years?
Discord please, implement it. Here a short list of services who support security keys and i use a lot:
* github
* microsoft
* google
* bitwarden
* twitter
* youtubeHope to add Discord to this list as well.
Thank you.
0 -
I would like to use my Yubikeys as my only 2FA for Discord If implemented please don't force to use TOTP as a backup.
I currently use it forTwitter
Bitwarden
Google Alt enrolled in advanced protection
a few forum sites like Cryptomator forums
Tutanota email
Facebook
All of the above let me use my Yubikey exclusively as my 2FA
0 -
It has been years since this request was opened and with this standard being pushed by Microsoft, Apple and Google now is the best time to adopt!
It's already directly built in to some android versions, it's releasing on iOS 16 in september and windows has had support for ages.
This will be a much more secure alternative to the adminitedly very flawed QR code login discord is using now.
0 -
Any news on this? I just assumed it "just works", like with GitHub, Google, AWS, and other "big sites", just to find out it's not even implemented. It's 2022, after all.
0 -
This place is write-only.
Discord teams no longer look here.
The few Contractor Developers may be too busy working on monetization, tracking activity on users devices to monetize it and convince users to pay a Nitro subscription for having access to fancy animated icons.
1 -
Hey! wanted to comment on this. I did some asking around in various official Discords and this feature is actually being worked on! They don't have a timeline for it, but they hear us and are actively working on it!
0 -
Hey! wanted to comment on this. I did some asking around in various official Discords and this feature is actually being worked on! They don't have a timeline for it, but they hear us and are actively working on it!
that's amazing! I wonder what it'll be like since Apple, Google and Microsoft are working on having Passkeys for the Passwordless future soon. IOS 16 is scheduled to be released next week which features the ability to do this! though it's going to be a hassle for Apps to implent this.
0 -
Security keys are now in the works officially! I've done some digging on twitter accounts and was met with pictures showcasing how it looks like. really excited for this!
1 -
https://twitter.com/DiscordPreviews/status/1570204472554528769 here is the tweet for anyone who wants to see for themselves
Not sure if it's allowed to link it but this is the most active thread on Yubikey support
2 -
Please Add WebAuthn / FIDO2 standard for Multi Factor Authentication using Security keys e.g. Yubikeys. I would love use my Yubikeys to increase account security. Currently I am unable add more than OTP.
0
請登入寫評論。
評論
84 條評論