# Requiring password before admin actions can be taken

**URL:** <https://meta.discourse.org/t/requiring-password-before-admin-actions-can-be-taken/52603>\
**Category:** Feature\
**Created:** [7. November 2016 um 02:17 UTC](https://meta.discourse.org/t/requiring-password-before-admin-actions-can-be-taken/52603 "2016-11-07T02:17:19Z")\
**Posts on this page:** 1\
**Showing post:** 1

<div class="post-metadata">

**Author:** ![vchuravy](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/vchuravy/32/120525_2.png) [@vchuravy](https://meta.discourse.org/u/vchuravy)\
**Post date:** [7. November 2016 um 02:17 UTC](https://meta.discourse.org/t/requiring-password-before-admin-actions-can-be-taken/52603/1 "2016-11-07T02:17:19Z")

</div>

I was thinking that it might be beneficial to have an option to require re-entering the password, before switching into admin mode or taking admin actions.

Github as an example requires this and I think the main reason is to prevent/slow down destructive action by an adversary who gained access to a device with an admin login.

The second feature I would like to see is 2FA, but that is already discussed elsewhere [Two-factor local login option - #8 by sam](https://meta.discourse.org/t/two-factor-local-login-option/12597/8)

If 2FA is implemented requiring 2FA, before admin actions would be great to have.

---

_[View the full topic](https://meta.discourse.org/t/requiring-password-before-admin-actions-can-be-taken/52603)._