Add 2FA-method to login
As I observe increasing login attacks, mostly coming from russian ip-adresses (which might be related to the russian war on Ukraine), I would like to see enhancing the login by a 2FA-method.
I think a OTP-method like e.g. Google Authenticator, Microsoft Authenticator or any other open source authenticator would be helpfull.
Or purely "login with" Google/Github etc. account
Yubikey ftw!
FTW = ???
FTW is "For the Win". See https://en.wiktionary.org/wiki/for_the_win#Prepositional_phrase
And no, Yubikey is not FTW at all. I'm OK with having that as an option, but the real FTW would be to start with a simple TOTP-based 2FA token. Maybe take a look at https://github.com/Spomky-Labs/otphp