Changing 2 factor auth periodicity to keep members involved

Hmm how often are you getting prompted for 2FA?

Just noting that I’ve never been prompted for 2FA on meta as my session is rarely/never expired.

There are some session settings you can set: /admin/site_settings/category/all_results?filter=session

  • “Persistent sessions” is enabled by default
  • “Maximum session age” is 60 days (1440h) by default

You could try to extend the session age, but I feel like a user who hasn’t opened the community in 60 days should probably be prompted to log in again.

Something else you can explore is also SSO, so there isn’t a need for your user to undergo 2FA.

1 Like