Could I please ask people how they go about forcing two factor authentication for users? I have found users tend to sharing logins otherwise. Looking at Ghost for a project but wonder about this aspect? Thank you

It’s not supported at the moment, nor is OAuth that would allow authentication through a third party that does support 2FA. It has been discussed before though. [image] Multi-factor authentication Ideas Would be awesome to have some form of multi-factor authentication in …

Just came across this post as I set up my first Ghost instance. It is 2021 and MFA via TOTP would be really a great feature. And it is really an accepted and widely available standard these days. #MFANow

Stumbled upon Multi-factor authentication before reading this post. I totally agree with @HachimanSec about TOTP being a great decentralized multi-factor authentication option that Ghost could implement.

I’d just chuck Cloudflare Zero trust policies in front of it for now using their free teams access offering to get an email OTP to login. [image] Access | Zero Trust Network Access Secure your employee access with a faster and safer VPN alternative. Free for up to 50 users. See why Kupp…

It’s 2023 please implement TOTP 2FA

I would also like to throw my customer-ness behind the request to have 2fa implemented. Is that a ghost(pro) platform limitation, or an open-source Ghost missing functionality? ie can we, the community implement it and ghostpro will use it, or do y’all need to take charge on it?

My blog got hacked and deleted and there is nothing I can do about it. I will never use ghost pro again. I moved to substack which has 2FA and free.

They say that anyone is welcome to develop features and add them to the project, so do you want to help implement the open source PrivacyIDEA ? Here’s a link to their API . This is a guide for implementing OTP Alternatively, there is Ory , “Ory is the largest open source community in the world for clo…

Hello, I’ve signed up specifically to request 2FA/MFA. I had been trying to persuade friends to convert from Wordpress to Ghost but the lack of 2FA/MFA was a huge issue, and I can understand it. Many people process financial and other sensitive data on sites now and are legally held responsible for…

Two factor authentication?

Developer help

StuartMorrisAU January 24, 2020, 1:28pm 2

It’s not supported at the moment, nor is OAuth that would allow authentication through a third party that does support 2FA. It has been discussed before though.

Topic		Replies	Views
Best method to integrate 2FA for our members and staff? Using Ghost	1	1214	May 9, 2025
[Let's do it] SSO for Ghost Developer help	28	3790	April 29, 2026
Device verification & email 2FA - Ghost Changelog News	1	369	April 25, 2025
Third party Single Sign On (SSO) Ideas	39	17819	February 8, 2026
2FA auth slider is missing? Developer help	10	209	April 14, 2025

Two factor authentication?

Related topics