# As a Community Edition user I can use 2FA/MFA feature

**URL:** <https://community.passbolt.com/t/as-a-community-edition-user-i-can-use-2fa-mfa-feature/4708>\
**Category:** Done!\
**Created:** [January 2, 2022, 1:25pm UTC](https://community.passbolt.com/t/as-a-community-edition-user-i-can-use-2fa-mfa-feature/4708 "2022-01-02T13:25:57Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![Roberts](https://avatars.discourse-cdn.com/v4/letter/r/ee7513/32.png) [@Roberts](https://community.passbolt.com/u/Roberts)\
**Post date:** [January 2, 2022, 1:25pm UTC](https://community.passbolt.com/t/as-a-community-edition-user-i-can-use-2fa-mfa-feature/4708/1 "2022-01-02T13:25:57Z")

</div>

Hi.

Great product and thanks for your hard word and paying attention to details as you develop! Also, thank you for committing to offer the Mobile App as a permanent feature in the Community Edition.

I have one more ask: **Offer MFA/2FA for all editions.**

Rationale:  
With MFA/2FA now being the standard for accessing portals, I believe it would be appropriate to offer MFA/2FA for all editions (including Community Edition) for **STANDARD** security.

Thanks for your consideration.

People can vote for this idea to show traction:

_Poll ([view on site](https://community.passbolt.com/t/as-a-community-edition-user-i-can-use-2fa-mfa-feature/4708/1))_

---

<div class="post-metadata">

**Author:** ![Caspar](https://yyz1.discourse-cdn.com/flex031/user_avatar/community.passbolt.com/caspar/32/781_2.png) [@Caspar](https://community.passbolt.com/u/Caspar)\
**Post date:** [January 4, 2022, 10:46pm UTC](https://community.passbolt.com/t/as-a-community-edition-user-i-can-use-2fa-mfa-feature/4708/2 "2022-01-04T22:46:02Z")

</div>

Well, I wouldn’t mind paying a bit for this feature, but it should have a “home-use” license that you are only allowed to use in private and not in businesses (where things like LDAP etc are not included) together maybe with some auditing features etc.  
I understand that certain features you will need to pay for do make sure that the product will keep developing.

---

<div class="post-metadata">

**Author:** ![AnatomicJC](https://yyz1.discourse-cdn.com/flex031/user_avatar/community.passbolt.com/anatomicjc/32/962_2.png) [@AnatomicJC](https://community.passbolt.com/u/AnatomicJC)\
**Post date:** [January 5, 2022, 8:25am UTC](https://community.passbolt.com/t/as-a-community-edition-user-i-can-use-2fa-mfa-feature/4708/3 "2022-01-05T08:25:15Z")

</div>

Hi @Roberts, I edited your post to add a poll on this request 🙂

---

<div class="post-metadata">

**Author:** ![Luclis](https://yyz1.discourse-cdn.com/flex031/user_avatar/community.passbolt.com/luclis/32/897_2.png) [@Luclis](https://community.passbolt.com/u/Luclis)\
**Post date:** [January 19, 2022, 8:26pm UTC](https://community.passbolt.com/t/as-a-community-edition-user-i-can-use-2fa-mfa-feature/4708/4 "2022-01-19T20:26:58Z")

</div>

I thinks this one is a security enhancement who can be profitable to everyone and not only enterprise. It’s the only PRO feature which is terribly missing on Community.

---

<div class="post-metadata">

**Author:** ![farfade](https://avatars.discourse-cdn.com/v4/letter/f/d07c76/32.png) [@farfade](https://community.passbolt.com/u/farfade)\
**Post date:** [January 30, 2022, 1:04pm UTC](https://community.passbolt.com/t/as-a-community-edition-user-i-can-use-2fa-mfa-feature/4708/5 "2022-01-30T13:04:07Z")

</div>

Can someone explain why the 2FA in the passbolt pro edition effectively increases the security of passbolt ?

If I’m not wrong, even in the community edition, the passphrase (first factor : what I know) is there to decrypt the private key (second factor : what I own) on the client side. So it is already a 2FA way to be able to retrieve a password. No ?

Instead of multiplying the factors of authentication beyond the two ones that are already there in the community edition, I’d rather focus on easing the differentiation (by device) and the rotation of the keys to be able to have fast and intuitive reaction in case of compromission (key file exposed, device stolen, …)

---

<div class="post-metadata">

**Author:** ![remy](https://yyz1.discourse-cdn.com/flex031/user_avatar/community.passbolt.com/remy/32/17_2.png) [@remy](https://community.passbolt.com/u/remy)\
**Post date:** [February 1, 2022, 5:28pm UTC](https://community.passbolt.com/t/as-a-community-edition-user-i-can-use-2fa-mfa-feature/4708/6 "2022-02-01T17:28:31Z")

</div>

@farfade we tried to explain that 2FA is already build-in by default since authentication is not password based but to be honest it’s an uphill battle. The same way there is also option to add 2FA for SSH, it doesn’t hurt to add one more for passbolt as well, even if it’s just marginally better.

---

<div class="post-metadata">

**Author:** ![shelby](https://yyz1.discourse-cdn.com/flex031/user_avatar/community.passbolt.com/shelby/32/2320_2.png) [@shelby](https://community.passbolt.com/u/shelby)\
**Post date:** [March 20, 2023, 2:58pm UTC](https://community.passbolt.com/t/as-a-community-edition-user-i-can-use-2fa-mfa-feature/4708/7 "2023-03-20T14:58:49Z")

</div>

Closed on March 20, 2023, 2:58pm UTC


