Hello, I have searched for something like this but have not been able to find exactly what I am looking for. I am trying to protect my admin account. My concern, which is most likely an edge case but possible nevertheless, is that someone could keep trying my admin account username (visible becau…

If someone is trying to brute force into your account, it will most probably ban their IP address and not really your account IIRC. Using 2FA will surely help a lot as it deters the malicious actors a lot. if You’re using a static IP on your home network you may be able to whitelist your own IP ad…

[صورة] bobbysmith: My concern, which is most likely an edge case but possible nevertheless, is that someone could keep trying my admin account username (visible because I use it to post user guides etc.) and lock me out by simply trying it several times. If anyone was going to try to log in a…

[صورة] JimPas: If anyone was going to try to log in as you, they would have to know the email address you used when you set up your account. That’s not correct, you can log in by username. 2FA will stop anyone that steals your password from reuse but DIDN’T get malware into your computer. E…

I stand corrected. I did forget about the SSH access route. :man_facepalming:

Thanks to you all for taking the time as these are helpful responses. So, it looks like 2FA is always a good idea, and if all goes south at least I have SSH access. Makes sense. Also, [صورة] JimPas: The ‘system’ is the forum software. When you set up your forum you did set up an account for …

[صورة] bobbysmith: So, it looks like 2FA is always a good idea Correct. And this applies everywhere, not just Discourse. If a site you use supports 2FA, you absolutely should configure it.

أفضل ممارسات أمان حساب المسؤول؟

دعم المنتج

jomaxro (Joshua Rosenfeld) 1 مارس 2021، 7:44م 7

صحيح. وينطبق هذا في كل مكان، وليس فقط في Discourse. إذا كان الموقع الذي تستخدمه يدعم المصادقة الثنائية (2FA)، فيجب عليك بالتأكيد إعدادها.

الموضوع		الردود	مرات العرض
Security measures proposal - User login brute force prevention, and more Feature	14	3981	8 أكتوبر 2014
Admin locked out of site after deleting two-factor keys from prefs Bug	25	2713	8 ديسمبر 2022
Sick of old forum, considering starting a new one with Discourse Community Building	10	2849	28 يناير 2016
Become admin Feature	8	470	5 ديسمبر 2024
Hosted account - disabling 2FA without access Product Support	3	464	10 يوليو 2023

أفضل ممارسات أمان حساب المسؤول؟

الموضوعات ذات الصلة