New Forum 2FA is password reset

When signing up on the new forum (death to rocketchat!), I noticed there was a 2FA option. It prompts you for a password to confirm you are you but then sends you a password reset email link rather than going thru a TOTP setup (which is what I expected).

Thoughts? People should be encouraged to use 2FA so please don’t disable :wink:

Thanks,
Steve

Hi, check meta.discourse.org for details on how 2FA is implelmented in its software

It worked for me! There was also the button

Didn’t see the continue button (there was cancel and send password reset email), but if you just put the password in and hit return it shows the TOTP code and you can finish the setup. Suboptimal, but worked. Thanks all.

1 Like