Google authenticator support #staff

[Guest]

Any plans on adding securing your account with google authenticator? 

[Casper31 73]

Any plans on adding securing your account with google authenticator? 

I hope not.Because google is a big privacy concern.

[Guest]

They can add more options that are privacy oriented to choose from and you don't have to enable it anw. 

[zhang888 1066]

Note that this would not improve your privacy and/or security.

You should use an email provider with 2FA, and use this email + a strong password on your Air account.

 

Unless your account (here) is administrative, your worst risk is that someone who compromises your

account can use your 3 connection slots or write posts under your name.

Something anyone can do for a few cents/day in any case...

[Guest]

What bothers me is that anyone that gets my login can come online here and check my real ip. 2FA email will not help with this issue. 

[zhang888 1066]

This could be a valid point, hence why you should use unique names here that are not associated with any other identities online.

Then, combining a strong password, no adversary should be able to know that you are actually you.

 

I mean, if they don't already have some prior info about you like infected machine or so. But then, 2FA will do little to help you.

Personally I think 2FA will just make people link their real mail accounts to their VPN accounts, and phones, and this is not very

good practice in general. If you want to solve the issue just use a very strong password, and then the only attack vector will be

attacking Air's servers directly, in which case passwords/2FA would be useless anyway.

 

Hope this made your threat model a little more clear.

[Guest]

Thanks for the feedback zhang888. I already follow most of your recommendations and they protect 99% of the cases for sure i just wanted a physical block, my phone, to make it 100%. Don't get me wrong none will ever care about me or my accounts but that doesn't mean everyone is me and i shouldn't suggest only stuff that affect me. 

[ofiris 15]

I think trying to find reasons for not using 2FA is not a good practice.

 

Sure there are services in which 2FA is more important than in a VPN. However, having 2FA is still good practice and may/will save some headaches. I, for one, am very sad that AirVPN has not yet implemented this nor are they commenting on it.

[hugomueller 13]

I like to revive this topic. 2FA has become more important. No one is forced to use Google Authenticator. You can also use FreeOTP or other apps.

As this should be optional there is no reason why not offering this to the users.