Multi-factor authentication enforcement lock in without help

Eviepayne
Thu, 02 Apr 2026 19:35:58 +0000
UX

I recently started enforcing MFA for all users on my forum and I was told that many users would be unable to see the thread that provides advice on how to use MFA (many users are not technical).

While the article is accessible to anonymous users, if a user is logged in, but not MFA enrolled they can’t see any of the site. They’re stuck on the user security preferences with this:

While I personally expect a user to be able to handle this, I have advised users who don’t use authenticator apps and privacy paranoid users on how to use MFA in a “more private way”.
Spare me the lectures, I know.

It would be nice if I could embed information in the enforcement message I could help users more like including a recommended password manager or authenticator app, or advise users to make sure their time is accurate on the device with the authenticator. Otherwise many users who are admittedly ignorant will have a bad experience and fight me more than they already are.

On a side note as well, passkeys are MFA, that should be resolved.

5 сообщений - 4 участника