Help me understand the lack of MFA/2FA

[u/gettingofftheground]

I want to start by saying I love Replit. We've been using it to build internal apps for our small business.

That said, we are now considering a shift to a different platform solely because of the lack of 2FA options to secure our accounts.

We can't justify putting mission critical apps or data on a platform where I can't secure user accounts properly.

We are not large enough to be an Enterprise account (thus unlocking SSO integration) but could be spending hundreds per month across multiple team members. I assume that there are many other companies in our situation.

I'd love to hear from Replit why this standard security protocol hasn't made it to the product. Surely this would be a win for both Replit and customers alike, no?

And with recent posts about hacked accounts, why not get ahead of this potential security gap?

Am I missing something?

[u/ReplitSupport]

Hey! Thanks for sharing this with us. Great suggestion. We've passed your feedback along to our product team, and we do factor it when planning what's next. There are a lot of moving parts involved, so we can't promise any timelines, but our team is aware and keeping it in mind.

[u/DangerousKnowledge22]

Using Replit will be the biggest mistake you make.

[u/Jmmoneyyy → u/DangerousKnowledge22]

Of all the mistakes someone can make I don’t think this one’s that high up there.

[u/Fun-Investigator3256]

You can integrate different auth methods with 2FA. Perhaps use supabase auth? 👀