Requiring MFA on popular gem maintainers

Re:Requiring MFA on popular gem maintainers by tialaramex on Tuesday August 16, 2022 @06:55PM (#32490071)

The most you've seen for a recovery code is 6 digits? Where have you seen these "never more than 6 digits" codes ?

GitHub's codes are 8 alphanumerics,

Dropbox 8 alphanumerics,

Live.com offers a 25 alphanumerics

Google 8 numeric

Facebook 8 numeric

Nintendo 8 numeric

Gitlab 16 hexadecimal

I'm sure some fool somewhere used a six digit numeric "recovery code" but the usual, while it isn't 40 is certainly more than 6.

[ Parent | on HN ]

Re:Requiring MFA on popular gem maintainers by 8organicbits on Wednesday August 17, 2022 @09:49AM (#32496349)

I must be mistaken, looks like 8, those are the sites I use.

[ Parent | on HN ]