kumiko.rocksbeta
Why KumikoUse casesExamplesProductCompareUpdatesLearnTrustDocsStart a pilot

Updates

Ship

Two-factor authentication is live

TOTP-based 2FA for every Kumiko app: QR enrollment, recovery codes, and a login-time challenge that revokes other sessions on change. Bundled feature, no custom code.

kumiko.rocks
Two-factor authentication is live

Multi-factor authentication ships as a bundled feature (auth-mfa). Mount it and every user gets self-service TOTP enrollment, with no custom auth code.

  • Enrollment: scan a QR code (or enter the secret manually), confirm with a code, get one-time recovery codes
  • Login challenge: once enabled, /auth/login answers with an mfa-challenge (plus a challenge token) instead of a session. The app swaps in a verify screen for the code
  • Session safety: enabling, disabling, or regenerating recovery codes revokes every other active session immediately

Works with any authenticator app (Google Authenticator, 1Password, Authy, anything TOTP). Full setup guide with the enrollment and verify flow: docs.kumiko.rocks/en/guides/auth-mfa-setup.

Related