I think I wanna prioritize improving the 2FA page, as it is currently generating a lot of support requests in the vein of people accidentally locking themselves out.
@Gargron I can help you on this topic. I plan to improve it too !
@Gargron maybe we can implement recovery codes when setting up 2fa
@Gargron yep just needs to validate an otp before activating 2fa ^^
@Gargron Yes, should require a valid token to activate to proof they have set up their 2FA properly.
@Gargron Most other apps make you enter your new code before it enables 2FA. Is that an option?
@Gargron that's 2fa for you though. People regularly do that to their Google account
@gargron I wanna help. Just fork and send PRs?
@iamjasonclark Pretty much yeah
@Gargron yeah backup codes, and that thing other sites do where you have to enter one or two codes first during setup before it officially activates
@Gargron doesn't seem to work with FreeOTP on android. Scanning the QR code just does nothing.
@Gargron I was surprised there wasn't any code validation.
@Gargron I did it too. And I needed to restore my database.