Two factor authentication

Discuss with the community any ideas you'd love to see in future DiskStations and DSM updates! We do our best to monitor and forward all of them, but we recommend to also use this form as our team will systematically see your suggestion:
http://www.synology.com/support/inquiry ... enu&type=1
Forum rules
We do our best to monitor and forward your ideas to our team, but due to the large amount, we may not see every single one and recommend to also use this form as our team will systematically see your suggestion:
http://www.synology.com/support/inquiry ... enu&type=1

Add two factor authentication to DSM?

Yes.
29
88%
Yes (with some related request).
1
3%
No.
3
9%
 
Total votes : 33

Two factor authentication

Postby mclotet » Wed Aug 08, 2012 8:32 am

Hi!

I think that it would be great if Synology would provide the option for two-factor authentification.

Something similar to what Gmail provides, a password + code. The codes could be generated using an app (like Google Authenticator).

I guess this would not be extremely complicated to implement and it would significantly increase the level of security of the system.

What do you think?
Last edited by mclotet on Wed Aug 08, 2012 4:19 pm, edited 1 time in total.
mclotet
I'm New!
I'm New!
 
Posts: 5
Joined: Thu May 03, 2012 6:25 pm

Re: Two factor authentication

Postby adgud » Wed Aug 08, 2012 3:17 pm

I thought of this today and was about to post a topic and I saw yours.

Yes, I also think this is much needed feature, as exposing the DSM interface to the internet is risky.
I understand that it probably would be only Android/iOS application, as sending text messages is an additional cost, however my guess is it is completely doable to implement such feature. Such security measure is extremely important since the data kept on Synology products is usually important and private.
http://forum.synology.com/enu/viewtopic.php?f=10&t=38457 - Syno Download Redirector - extension for Opera browser
adgud
Novice
Novice
 
Posts: 51
Joined: Thu Sep 09, 2010 9:24 pm

Re: Two factor authentication

Postby mclotet » Wed Aug 08, 2012 4:22 pm

... the data kept on Synology products is usually important and private


This is indeed what I had in mind. As I see it security is amongst the most critical issues for NAS products and adding such feature would be a big improvement.

I added a poll for people to vote this feature.
mclotet
I'm New!
I'm New!
 
Posts: 5
Joined: Thu May 03, 2012 6:25 pm

Re: Two factor authentication

Postby nalberti » Tue Aug 14, 2012 6:46 am

Yubico YubiKey Support Please :)

I'm not sure why anyone wouldn't want this as an optional feature, Google Authenticator is free, a YubiKey is ~$25..
nalberti
I'm New!
I'm New!
 
Posts: 6
Joined: Sun Aug 12, 2012 12:17 am

Re: Two factor authentication

Postby trezoristo » Sun Oct 21, 2012 11:09 am

I just want to add my support for this feature. As others have mentioned, because a NAS often contains personal files and is exposed directly to the internet, it is important to be on the forefront of security technology. Furthermore, because of free apps like Google Authenticator that don't require text-messages to be sent, such a feature needn't be expensive.
trezoristo
I'm New!
I'm New!
 
Posts: 3
Joined: Mon Feb 20, 2012 8:55 am

Re: Two factor authentication

Postby level380 » Wed Oct 31, 2012 12:23 am

+1 to supporting Google Authenticator
level380
Versed
Versed
 
Posts: 203
Joined: Thu Dec 13, 2007 12:31 am

Re: Two factor authentication

Postby kc6108 » Wed Oct 31, 2012 6:22 pm

+1

Perhaps Verisign VIP?
NAS: Synology 1812+
Hard Disks: 8 x Seagate Barracuda 3 TB (ST3000DM001)
RAID Type: SHR, with 1-disk redundancy
Additional RAM: Kingston 2 GB 1066MHz DDR3
UPS: APC BR1500G w/ BR24BPG External Battery Pack
Main Router: Cisco SA540
Access Points: 3 x Linksys E4200
Main Switch: Netgear GS724Tv3
Other Switches: Several 5- and 8-port D-Link switches
User avatar
kc6108
Novice
Novice
 
Posts: 51
Joined: Wed Sep 19, 2012 4:30 pm

Re: Two factor authentication

Postby id084895 » Fri Nov 02, 2012 9:57 am

+1 for Google Authenticator (dropbox supports it as well!)
id084895
Trainee
Trainee
 
Posts: 18
Joined: Sat Sep 08, 2012 8:48 am

Re: Two factor authentication

Postby msh317 » Sun Nov 04, 2012 1:59 pm

I agree with the addition of Google authentication and the addition of both Google Drive and Dropbox to the cloud file sync.

Two factor authentication or multi factor would be a good security addition along with sharing of blocked IP addresses in the form of a distributed blacklist.
msh317
I'm New!
I'm New!
 
Posts: 1
Joined: Sun Nov 04, 2012 1:55 pm

Re: Two factor authentication

Postby shcam » Sat Nov 10, 2012 2:55 pm

It would be good to be able to selectively enable two-factor authentication by group: i.e. to be able to enable this for DSM web access by the administrators group only.
shcam
I'm New!
I'm New!
 
Posts: 3
Joined: Sat Nov 10, 2012 2:40 pm

Re: Two factor authentication

Postby heliostatic » Thu Dec 13, 2012 7:20 pm

Authy (http://authy.com) is looking to be the one stop shop for 2-factor auth. Might be nice to use them as a provider.
heliostatic
Trainee
Trainee
 
Posts: 18
Joined: Tue Feb 08, 2011 1:30 am

Re: Two factor authentication

Postby synology2013 » Tue Dec 10, 2013 3:46 pm

Yes, with yubikey directly to the yubico online api...
With a fallback to a local password if yubico is offline (or internet connection is down ;))
synology2013
I'm New!
I'm New!
 
Posts: 1
Joined: Tue Dec 10, 2013 3:41 pm

Re: Two factor authentication

Postby bbrotschi » Fri Sep 26, 2014 2:36 am

I am new to Synology devices, and being a Symantec employee I would like to see support for the use of VIP two factor authentication. It appears as though the Google option is the only one I can use. Has anyone figured out how to use Symantec / Verisign VIP ?
bbrotschi
I'm New!
I'm New!
 
Posts: 3
Joined: Thu Sep 11, 2014 3:57 am


Return to Feature Requests & Product Improvement Suggestions

Who is online

Users browsing this forum: No registered users and 10 guests