-
Notifications
You must be signed in to change notification settings - Fork 1
Description
One of the most difficult parts about getting two-factor authentication rolled out across a site is getting individual users to set up the security feature on their accounts. I personally subscribe to the notion that a chain is only as strong as its weakest link, but recognize that unless they're forced to do it (either by software or other people) the majority of users won't take the time to make their accounts more secure.
With that in mind, I think a nag screen could be a great addition to the plugin. After the plugin is activated, users who haven't yet set up 2FA on their accounts would be shown a message on every admin page prompting them to set up 2FA. Going a step further, something like the WordPress about screen could be displayed, giving the user clear instructions on finding and downloading an app for their phone and enabling two-factor authentication on their WordPress account.