XF2 Addons [DigitalPoint] Security & Passkeys 1.1.8

Addon to help users keep their account secure.

Features

• Support for Passkeys (also known as WebAuthn / FIDO2 security keys) as two-step authentication (hardware devices such as YubiKeys are what large tech companies such as Google require their employees to use to keep their accounts secure).
  • Support for multiple keys per user
• Option for Days to trust two-step verification. Now you can set it to whatever is appropriate for your site, vs it being hardcoded to 30 days in XenForo.
• Option for Recommended strong two-step options. This allows you to encourage users to have more than one two-step option (backups in case they lose access to the main one they use).
• Users can see/manage the trusted devices for their account (under Account -> Password and security -> Two-step verification).
• Users can see the IP addresses used for their account (under Account -> Password and Security).
• Users can see/manage remembered sessions for their account (under Account -> Password and Security).
• Admins can see/manage remembered sessions for users (under the Sessions tab when editing a user).
• Country-level geo-targeting of IPs for account IPs, sessions, and trusted devices is done automatically if the site is using Cloudflare with the IP Geolocation setting turned on for your zone.

Note: As an experiment to keep the cost of this addon free, there is an affiliate link used if a user wants to buy a YubiKey.