Require password to access admin panel

Contribute Feature

AI-generated summary

ron_jeremy suggests implementing a security feature in Discourse that requires re-entering a password to access the admin panel. codinghorror asks for the purpose and real-world examples of this feature. ron_jeremy explains that this would provide an extra layer of security in case a device is lost or stolen, as he is often logged in to his forum on multiple devices. However, pfaffman points out that this issue can be mitigated by using a phone’s password and forcing a log out on all devices if needed. mcwumbly suggests a workaround by creating a separate admin account for critical tasks and using a normal user account for day-to-day usage.

1

Hey Discourse Team,

What are the chances you could implement a security feature that requires one to re-enter their password to enter the Admin panel?

  • Good idea
  • Ni hablar, senior
0 voters
Requiring password before admin actions can be taken
2

For what purpose? Why is this needed? Provide real world examples please.

1 Like
3

I’m logged in to my forum all the time, whether it be on my phone or tablet (via Discourse app) or the browser on my Mac. I’d feel better knowing if someone walked off with one of my devices that my forum wouldn’t be on my ‘panic list’.

Discourse would not be the first platform to implement such a security feature.

Maybe I’m overly paranoid.

1 Like
4

Uh, does your phone not require a password? If not, the your forum is the least of your worries. If so, then what’s the problem?

It’s pretty easy to force a log out on all of your devices.

1 Like
5

A workaround mentioned elsewhere here on meta is to create a separate admin account for yourself and use a normal users account for day to day usage.

6 Likes