Talk:Community Wishlist/W75

Already

@Dmartin969 I wouldn't trust Google and Apple with such keys. Better Software & Hardware Swissbit Hardware Key, Nitrokey, [1], authenticatorplus FreeOTP+, OTPClient (linux) All administrators can use 2Fa. There are also user groups that must use this. Non-administrators can be added to a global group that enables 2Fa. See Help:Two-factor authentication 𝐖𝐢𝐤𝐢𝐁𝐚𝐲𝐞𝐫 👤💬 17:58, 28 July 2024 (UTC)

I wouldn't either, if I were a high profile person or IT specialist. But for the average joe, having your keys in iCloud keychain or Google Authenticator is safer than NOT having 2FA, 2FA via SMS or a key that is not automatically backed up. It is really important for wikimedia sites to ensure that people do not lose their key, as unlike most websites, we do not have very good accountrecovery options in that case. —TheDJ (talk • contribs) 20:14, 29 July 2024 (UTC)

Thank you

@Dmartin969 could you elaborate on why you'd like to see 2-factor authentication? JWheeler-WMF (talk) 21:49, 29 July 2024 (UTC)

+1. Personally, I would like to see how this could improve my experience with Wikipedia. 2dk (talk) 19:59, 30 July 2024 (UTC)

I don't understand what is being requested here. We already do have two-factor authentication and have had it since 2016. We deliberately obscure that fact from new editors because we've decided it's apparently too easy to lock yourself out with it, but that's a social choice not a technical issue. And we use TOTP, which many apps should support. In fact, the account this edit is being made from has 2FA enabled, and is required by local policy to have it enabled. * Pppery * _{it has begun} 21:58, 2 August 2024 (UTC)

Update from WMF

Hi, thanks for submitting this! We are doing an audit of older wishes listed as near-term opportunity and saw this wasn't actually on any team's radar, so a reminder will be sent for them to review this and provide an update on feasibility. MikeZ-WMF (talk) 15:22, 23 February 2026 (UTC)

Hi @Dmartin969 (sorry for not tagging you before!)

To close the loop, this wish was previously accepted and marked a near-term opportunity, a wish status that we did away with earlier this year. Wishes such as yours were updated to be either “prioritized” or back to “under review”. I mistakenly put this as “under review” since there weren’t any tickets linked, but actually the Product Safety and Integrity team was working on this as part of their account security overhaul over the last year.

Two-factor authentication is now globally available to all users, and you can use authenticator apps, security keys, and other kinds of passkeys to secure your account. MikeZ-WMF (talk) 14:29, 18 June 2026 (UTC)