How close is Supabase to implementing MFA? Don't e...
# ideas-and-suggestions
d
How close is Supabase to implementing MFA? Don't expect an exact date but whether its in days/weeks/months would be nice so i know if I can use Supabase auth with my project that is to be released in the short to medium term 🙂
s
I mean launch week is coming up soon, so who knows what will be released
d
Oh nice! When is launch week? I am new to Supabase and the community so much to learn!
s
End of March
d
really hoping for MFA as we are dealing with some sensitive data and I don't see us being able to launch a consumer product without MFA
thanks for the quick response
s
Would the Phone Auth cover your use case? or is it missing something?
I guess probably not, but seeing that Phone Auth was released around mid last year, hopefully Multi-Factor Auth (MFA) should be coming real soon.
Multi-Factor Auth (MFA)
d
The issue with phone auth as a primary auth source is, as mentioned in the official Supabase video, is that it is 1. Does not remove the issue of it being a single point of failure 2. Phone numbers change as people move countries and usually phone providers recycle them, so someone unintentional could suddenly have access to critical data
Thanks for the suggestions tho. MFA is the way to go for us 😄
g
You can see here a rough idea of what is being worked on in gotrue: https://github.com/supabase/gotrue/projects/2#card-76306826 MFA is in their top priority group and seems to have very recent activity...
j
Jumping into an old thread here, but is there any ETA on when MFA might be coming? Just been informed by my boss that moving to Supabase will likely be canned if it's not implemented, so hoping I can head it off with an ETA.
c
I'm hoping Supabase implements MFA as well. We definately need it with healthcare and now most cyber insurance policies are mandating it for businesses. We use Okta so may also need to change directions due to MFA requirements