Temporarily store 2-step verification
As it’s already (welcome) extra work to enter two passwords, could 2-step verification be implemented so that known devices would only need to be verified again every 30 days or so?
At the moment, with 2-step verification enabled, even a page reload triggers triple authentication, which makes the added security a poor experience.
-
David Garcia commented
This could be problematic as 2FA is there precisely to protect your account. If you want easy access to your account, wouldn't be enough if you don't drop your cookie?
-
José Ferreira commented
I would just like to point out that in the beta (beta.protonmail.com) it remembers both the password and 2FA, at least in last 3 days that I have been using it. On the bridge app it just requires a master password for your password manager. This is very inconsistent behavior.
I also think that it's best to remember the device for a given period of time, preferably user defined, for the 2FA but require a login password each time we open the mail client and recommend the users to use password managers, that way only one password had to be inserted.
-
Tony McCrary commented
Why hasn't proton mail addressed this serious usability flaw? If the company can't fix something simple like this, how secure is the code running the email and vpn services?
-
Anonymous commented
+1
4 years later still nothing new about this, :( what a bad user experience to enter password + 2FA every single time you open pm in a new tab (can't even let the computer sleep !) meanwhile you stay connected easy peasy on android app.. this is really annoying every day.
The support told me it's all about security and they're working on a "remember me" feature but there such little info about this (no roadmap, no eta, ..). This is a must have feature every single other service on the internet already have.. -
Anonymous commented
+3. Can't believe this is not an option yet. This is really the one thing I hate about protonmail as primary mail. I'm a bit disappointed there hasn't been a response from the developers to this (and some other) suggestion, although it's there for years.
-
Ian commented
Honestly a little surprised that this was suggested almost 4 years ago and still isn't here. Would like to hear from the team if this is something that's on the roadmap at all.
-
Roberto Mastrofrancesco commented
We need this. Voting here hoping someone sees.
-
Anonymous commented
I miss this so much! I hugely dislike authenticating again and again on the same device
-
Brian McGroarty commented
DreamHost implements this nicely. The default is not to remember the device. But the user can choose to remember the device for one week or one month. This option is presented when the user is prompted for a TOTP token.
-
Anonymous commented
Absolutely, there needs to be a Keep Me Singed In (KMSI) option for MFA. Or at least an 'Add as trusted device' so we are not prompted to enter MFA every time the browser restarts or the PC is rebooted.
-
Anonymous commented
I turned off 2FA because of this, makes experience very poor. Would be awesome to see this feature added!
-
Anonymous commented
+1 for this issue ! So annoying. I think I will turnoff 2FA because of that. Please change that !
-
Anonymous commented
Just +3 this one. This is a bit of turnoff when using the webclient.
-
Daniel commented
I actually had to turn of 2FA due this issue, I mean is insane have to do verification every time I open the email o the same browser... As is, 2FA is actually useless because most of the people will be force to turn it off. I would love to have 2FA that I can actually use...
-
Anonymous commented
Please allow us to use 2FA. Remember device is a MUST! (should be for 3days or something, not forever since that is a bad idea too)
-
Shuki commented
-
ool commented
Just adding a +1. Please add this feature.
-
gjwolfswinkel commented
The lack of this feature is stopping me from switching to Protonmail as primary mail client for my custom domains.
-
Ali commented
A very much needed feature. I just created and account and found it very cumbersome to enter the code every single time i log in.
-
Anonymous commented
I've been wanting to primarily use ProtonMail for years and the lack of this feature has dissuaded me from doing so.