Plugin or existing feature to force email verification log in after change IP or inactive account

Functie
1

I am wondering if there is existing features in discourse or a plugin that can achieve this:

  1. When the user is inactive for amount of period (like 30 days), when they login, it requires an email verification or 2FA.
  2. When the user login change IP suddenly, also triggers an email verification or 2FA.

This can help hacking inactive account

2

There is GitHub - discourse/discourse-auto-deactivate: This plugin will automatically deactivate stale users so that they need to recomfirm their email in order to login in again

I know Discourse checks staff logins based on their location and sends them an email if the location of the new IP is more than 100 kilometers away from the other known locations. Suspicious logins are also shown in the security reports on the admin dashboard.

1 like