Multifactor authentification (MFA)

[Didayolo]

We need MFA for improving the safety of the platform.

Instead of phone number we could have an "auth app" endpoint.

Also to avoid:

• Influx of spam participant joiners - Multifactor authentification (MFA) #1733

To incentive / force MFA

Thoughts about incentives for the double authentification (phone / auth app verification):

Option 1: storage quota

Instead of forcing it, we could give incentives by increasing the storage quota. For instance:

• Base user (email verified): 200 MB storage
• After phone verification: 15 GB storage
• Filling up info (github account, etc.): Up to 30 GB

Option 2: organizers option

An organizer option "Allow only verified users".

Option 3: organizers need to be verified

You can upload / manage competitions only if you are verified. That would improve security.

To be discuss

What would be the procedure if an user lose its authentification?

[Didayolo]

@IdirLISN @ObadaS Please add any suggestion you have about MFA