Changes compared to 20.3.1
PLEASE NOTE: this is a limited-security feature only, protecting only (A) registering new devices; (B) opening the desktop app; and (C) logging in to the Comet Server web interface as an end user. Because backup jobs need to run unattended without 2FA prompting, this feature does not provide full 2FA protection in all cases.
New Features
- Support TOTP 2FA for customer accounts
- Support an end user changing their own password, language, account-name, TOTP when logged in to the Comet Server web interface
- Support an admin changing customer's password without recovery code, if they otherwise know the customer's password
- Prompt for one valid TOTP code before enforcing it for future logins in the Comet Server web interface