Mikrotik 2 Factor authentication

[optio]

@rextended

Serious question, I’m not kidding:
Aside from preventing that if someone gets the exact right credentials, on the first try they can log into the router,

what is two-factor authentication for?

.

If we were talking about hardware 2FA token devices (e.g. RSA SecureID), it was a check that physical held something. Since semi-temper resitance and cannot backup/copy them, so if lost/missing you really are screwed – that adds a quite a bit of a layer from 2FA. When your just switch to another app like Google Authenticator (or Authy or whatever TOTP-enabled app) on the same device that may have your password saved in the keychain/browser… I’m not sure that add the same level of security…so not all 2FA isn’t the same. Does user-manager add something with TOTP… sure. How much, harder to quantify.

For various factor combination term is MFA if multiple factors are involved, 2FA is part of MFA scope