[DigitalPoint] Security & Passkeys Xenforo v1.2.0.3

Compatible XF 2.x versions

• 2.0
• 2.1
• 2.2

Additional requirements: OpenSSL PHP extension
Visible branding: No

Features

• Support for Passkeys(also known as WebAuthn / FIDO2 security keys) as two-step authentication (hardware devices such as YubiKeys are what large tech companies such as Google require their employees to use to keep their accounts secure).
  • Support for multiple keys per user
• Option for Days to trust two-step verification. Now you can set it to whatever is appropriate for your site, vs it being hardcoded to 30 days in XenForo.
• Users can see/manage the trusted devices for their account (under Account -> Password and security -> Two-step verification).
• Users can see the IP addresses used for their account (under Account -> Password and security).
• Users can see/manage remembered sessions for their account (under Account -> Password and security).
• Country-level geo-targeting of IPs for account IPs, sessions, and trusted devices is done automatically if the site is using Cloudflare with the IP Geolocation setting turned on for your zone.

Note: As an experiment to keep the cost of this addon free, there is an affiliate link used if a user wants to buy a YubiKey.