two-factor authentication for kasa accounts
Is two-factor authentication coming soon for kasa accounts?
- Copy Link
- Subscribe
- Bookmark
- Report Inappropriate Content
Announcing Two-Factor Authentication for Kasa Users
We have started to roll out two-factor authentication for our Kasa accounts. This means that, when enabled, a new device signing in with TP-Link ID will be asked to present a time sensitive verification code to protect your account from unauthorized access.
I have already created and published a new KB Article detailing how to Set up 2-Factor Authentication in the Kasa App. If you want to jump ahead and get registered, the instructions for sign up, if eligible, can be found here:
Enabling Two-Step Verification on the Kasa App
As a reminder, we are slowly rolling this feature out to our users by enabling the feature on your account in waves. The menu for Two Factory Authentication can already be found in the app, and will tell you if the feature has been enabled on your account yet.
- Copy Link
- Report Inappropriate Content
We have had customers in the past request that feature which we forwarded to our developers. So far, it seems that there are not any plans to have that.
- Copy Link
- Report Inappropriate Content
- Copy Link
- Report Inappropriate Content
2 factor authentication should be a priority security software update ASAP. You see on the news everyday about compromised accounts. If you don't want to scare customers away from your products by not offering this critical feature, you should be looking to offer this security measure within the next month.
- Copy Link
- Report Inappropriate Content
I enjoy the products but will hold off purchasing more until this update occurs. This is critical.
- Copy Link
- Report Inappropriate Content
@Tony is there any update on this? New breaches daily, we need 2FA on the Kasa system, its not an 'optional' thing in this world anymore. Is there any movement?
- Copy Link
- Report Inappropriate Content
We have stressed this on behalf of smart home users, and it is on their (devs) minds. Hopfully we will have that as more households integrate our smart home products, but as of now there is no update.
- Copy Link
- Report Inappropriate Content
@Tony Thanks for the reply. It's a bad indicator - If they don't take simply enabling 2FA seriously on home-control devices (cameras for crying out loud) I'd imagine they don't take security seriously at all. In general, its known in the industry IoT security is just awful all around, but to not even attempt to further secure their customers with simple 2FA, is in my view, is negligent considering the security climate we are in today.
I'd strongly urge you to send this message to your superiors and the leaders of your company, and ask them to be a leader in IoT by investing in proper security. This could in fact become a selling point for you.
https://www.schneier.com/crypto-gram/archives/2020/0115.html#cg4
- Copy Link
- Report Inappropriate Content
- Copy Link
- Report Inappropriate Content
Guys.... Get 2FA now. Why are you toying with your customers trust and security?!?!?! I bought this assuming you had it like other vendors. Do you really want PR nightmares like ring and nest?
- Copy Link
- Report Inappropriate Content
@Tony Firstly let me add my vote to this topic by saying MFA is an essential security feature for Kasa.
I actually bought in to the system naively assuming that MFA would have been supported as one would expect. I am now reluctant to expand it as it cannot provide me the requisite level of security.
This topic has been raised historically and like this thread has reached a dead end from TP-Link.
Therefore please can TP-Link answer the following initial questions relevant to this thread:
* Provide directly from the development team whether MFA is on the backlog and what priority it has been assigned?
* If it is not on the backlog provide directly from the development team a reason why and further information as to what would be needed from the community to get MFA on the backlog?
* Whether there is another platform for which this request can be raised with a better level of support such as direct access to the development team and management?
EDIT: I have not had any response in over a week so I will start a new thread with my questions
- Copy Link
- Report Inappropriate Content
Information
Helpful: 11
Views: 11465
Replies: 26