mmo-ref/drop
1
0
Fork 0
mirror of https://github.com/Drop-OSS/drop synced 2026-08-27 14:23:05 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions

Add MFA notes

Browse source
This commit is contained in:
DecDuck 2026-03-10 18:24:04 +10:00
parent 150ff87856
commit 0a14fb412d
1 changed files with 16 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

16
docs/src/content/docs/admin/authentication/mfa.md Normal file
View file

@ -0,0 +1,16 @@
---
title: Multi-factor
description: Notes about the various MFA/2FA method available in Drop.
---
## WebAuthn (a.k.a Passkeys)
Passkeys are a passwordless authentication standard backed by both HSMs and software like password managers.
Drop supports them both as a MFA method, and a single-step signin.
Passkeys are expected to work out-of-the-box on all installs, but you may have issues if you don't run Drop over HTTPS.
Additionally, if you're having issues related to the domain/relying party (RP) reported to WebAuthn, you can set the `WEBAUTHN_DOMAIN` to override that. WebAuthn requires all relying parties to either be a domain (example.com) or a subdomain (example.com)
## TOTP or code-based
TOTP is expected to work out of the box.