Any updates about MFA ?
This should be mandatory. Any updates?
I don’t know. I run my instance behind Cloudflare since this mess and do not expect they ever will come along with a proper MFA solution.
Apparently it has been implemented, not sure since when. Good work nevertheless.
I have just enabled MFA (with TOTP) on https://account.nabucasa.com .
1 Like
I just found out the same after I got a friendly reminder my subscription will renew soon and was browsing the account page on their website.
Edit: if you can’t manage to scan the QR code because it doesn’t work well with the dark background, temporarily turn off the dark mode of your device or browser.
It looks like if you have already enabled it you are good. But for new accounts you are out of luck. https://support.nabucasa.com/hc/en-us/articles/25807025727005-Enabling-multi-factor-authentication-MFA-for-Home-Assistant-Cloud
I really don’t understand how this is not mandatory. They need to get with times!!!
Yes, that’s really disappointing to discover. It would be a hard slog changing to a different ecosystem, but it certainly encourages me to have a look around at what else is available. Even if they don’t yet support hardware keys (e.g. yubikey) at the moment, almost every site supports TOTP or some app-based system (like many banks).
Still no MFA on a critical cloud account like this is diabolically weak of Nabu Casa. What in the world is taking so long!?
This is highly disturbing to discover. Why is this not being prioritised?
I just started a trial to find out that there’s no MFA for the cloud services of Home Assistant. So now I disabled remote access on my instance and will not buy a subscription until this very important issue has been fixed.
This is mandatory from my point of view. Please add this functionality, then I will buy a subscription as I am willing to support the development of Home Assistant.
1 Like