Would be awesome to have some form of multi-factor authentication in front of the /ghost admin login. Lack of MFA + rate limiting makes it highly susceptible to brute force. Anyone know of any workarounds?

In addition to existing brute-force protection, support for device verification and email-based MFA has been released: [image] Device verification & email 2FA Security improvements for staff user authentication

Hi, Can we please get 2FA for staff accounts implemented via an authentication app such as the one built into Apple device password store or an app like Authy? The passwordless system for members to log in is excellent, but the email/password combination for staff members is highly outdated and la…

2FA should really be mandatory for all staff accounts.

MFA will be the best choice for security concerns. I hope in the future we will have this feature in Ghost. :smiling_face_with_three_hearts:

Why is this still not implemented? It’s been 5 years since it was first suggested. We’re handling people’s private personal and payments data. EDIT: so this comment was apparently close to violating the Code of Conduct. I have been told I should make “suggestions with sources”, so here we go. Clea…

Is that a real limitation to implementing some MFA that’s mandatory for every project that supposed to be secure on internet? Are you still thinking on that on 2023? I can live without SSO (because there are devs around there) and I can bought a theme (two really). But I can’t open to the world my…

We will be hopeful. [image] Leveraging 3rd party sign-in Developer help Hello wave Ghost community, I’ve spent a bit of time clicking through this great community and I’m specifically searching for some thoughts/ideas/solutions to this one burning question. Can Ghost us…

I would really like to secure my newsletter login with 2FA. Many hacks nowadays are stopped by such mechanisms.

I would like to see Passkeys implemented.

Is there any update or official update from Ghost in regards to if 2FA/MFA feature is being worked on?

I know there is already a thread, but wanted to express that MFA should be without question the top priority for new features. No plugins – MFA built in to the product like any other app. I cannot even think of a single other app I use that doesn’t have MFA. I love Ghost but this really confuses …

Multi-factor authentication

Ideas

pureflo June 24, 2023, 8:12am 26

We will be hopeful.

Topic		Replies	Views
Two factor authentication? Developer help	22	6331	April 23, 2024
[Let's do it] SSO for Ghost Developer help	28	3853	April 29, 2026
Best method to integrate 2FA for our members and staff? Using Ghost	1	1216	May 9, 2025
2FA auth slider is missing? Developer help	10	225	April 14, 2025
Cannot login to ghost admin. "There was a problem on the server." message appears Developer help	11	1852	June 29, 2025

Multi-factor authentication

Related topics