1417078 - 2 step verification on firefox account

Status: RESOLVED FIXED

(Cloud Services :: Server: Firefox Accounts, enhancement)

Description

[vee w]

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:57.0) Gecko/20100101 Firefox/57.0
Build ID: 20171112125346

Steps to reproduce:

I logged in to firefox account for use sync & rate the add-ons but found that firefox account don't have 2 step verification settings for me to improve security for my account.


Actual results:

I don't have 2 step verification or multi-factor authentication on firefox account. There are no settings about this.


Expected results:

Firefox should have it to improve user's security like the other did such as Google account.

Comment 1

[Vijay Budhram]

Hey vee w,

Thanks for bug report! Unfortunately, FxA does not expose any 2FA options from the account page. For sync logins, we may require you to re-verify your email address before you retrieve any data (user might be able to skip this if recently confirmed email on same device). However, this is not the same type of 2FA that google uses. 

We currently don't have any set plans to add new 2FA methods this quarter, but are constantly evaluating exposing new features around it.

Comment 2

[Alex Davis [:adavis]]

I'd like to add that we hope to finish in the early new year the ability to use push across devices as a form of 2FA.

Example, if you signin to Firefox on a desktop, a push will be sent to your mobile device. When you click on the push and unlock your phone, it will verify your desktop login.

Much of this work has already been done but lost the engineering that drove it 90% of the way there. We hope to finish what he started.

Meanwhile, as Vijay explained, most logins relating to Sync require a second step via an email confirmation loop to improve the security. This is why it is best to always use a different password for your email and Firefox Account.

Comment 3

[vee w]

Hello,

I don't know that there is email verify before sync because I never see it.
I would like to save my passwords in Firefox but I can't because there is no multi-factor authentication as I said.

Thank you

Comment 4

[Alex Davis [:adavis]]

Vee w,
if you need some sort of proof, install Firefox on your phone and use your 4G network to login (not your home wifi). This way you should trigger the email verification loop. Slim chance you'll have been on that IP before.

Comment 5

[vee w]

(In reply to Alex Davis [:adavis] [PM FxA+Sync] from comment #4)
> Vee w,
> if you need some sort of proof, install Firefox on your phone and use your
> 4G network to login (not your home wifi). This way you should trigger the
> email verification loop. Slim chance you'll have been on that IP before.

Yes, I've just see that :)

However thank you for accept my feature request.

Comment 6

[Vijay Budhram]

Vee w,

Firefox Accounts recently launched two-step authentication and are rolling it out to users. If you would like to enable it, you can read more about it here, https://blog.mozilla.org/services/2018/05/22/two-step-authentication-in-firefox-accounts/.

Comment 7

[vee w]

Thank you ❤❤