Feature request - 2FA/TOTP

[pdmarf]

As far as I can tell, the current sign-in options are magic link and email/password — there's no 2FA option I don't think.

What I'd like to see please:

• TOTP-based 2FA as an optional second step on top of the existing sign-in methods.
• Passkey support

Why it matters:

• Our client contracts require every app we use to have 2FA/passkey enabled

[steve8708]

Thanks for filing this issue and for the detailed request. Would opt-in TOTP meet your immediate requirement, or do you need workspace-enforced MFA? Which is the contractual blocker: TOTP, passkeys, or both? We don’t have a delivery commitment yet.

[pdmarf]

opt-in TOTP would meet the immediate requirement. Passkeys would be an additional nicety. TOTP is the contractual blocker. Thank you.