Provide an authenticator MFA for Lifehub

Mike3
Mike3 Quicken Windows Other Unconfirmed ✭✭✭
edited March 7 in Ideas for Quicken LifeHub

The only option now is SMS

10
Up
10 votes

Reviewed · Last Updated

Comments

  • RMJErdman
    RMJErdman Member ✭✭

    This is essential if you want people to be able to own their own info, along with a statement that says that the data is ONLY accessible using the MFA and not behind the scenes by the company offering the product. It'd be nice to know we're paying for protection and organization services, not paying to be pillaged for data scalping for marketing purposes.

  • mpdoherty
    mpdoherty Quicken Windows Subscription Member ✭✭

    I agree that you need to add 3rd party authenticators for MFA (my personal preference would be DUO).

    ALSO…. currently, even when MFA is enabled, once you authenticate to a specific machine/browser, you are no longer challenged going forward. This is NOT good. If a bad actor compromised that machine then simply by opening that browser then they would have full access to the confidential information stored in LifeHub. My suggestion is that you add a user configurable button to enable/disable "auto-logoff" after each browser session. That way when I close the browser, then I am automatically logged off of LifeHub and will be MFA challenged upon the next session. For those concerned with left-open browsers, you could also offer a "time-out" function (e.g. auto logoff of LifeHub if browser session is inactive for X minutes).

    Bottom line is that I want to be MFA challenged EVERY time I open LifeHub in a new browser session! Please make this happen!!!

  • mpdoherty
    mpdoherty Quicken Windows Subscription Member ✭✭

    A related request for LifeHub product development team… the reason MFA is enabled is to protect highly sensitive information. This protection is compromised when you grant access to an Editor or Viewer with access to that information who does NOT also have MFA enabled. Solution? Allow a Lifehub owner to REQUIRE Editors & Viewers to have MFA enabled. Do it!

  • rumiz
    rumiz Quicken Mac Other Member

    Please a support for Yubikey.

  • sauerbrunndaa
    sauerbrunndaa Quicken Windows Subscription Member, Windows Beta Beta

    I was shocked when a viewer I invited was able to enter with just a username and password. 2FA is a "nice to have" but their choice. This is MY data and that should be MY direction and requirement

Categories