Securing Zimaboard 2: 2FA Setup and ZeroTier vs VPN Comparison

Insight & Feedback
,
1

Hello,
I need two pieces of information:

  1. Is it possible to configure two-factor authentication when a user logs in to Zimaboard 2?
  2. I’d like to access Zimaboard 2 remotely. Do you recommend using ZeroTier’s built-in configuration or a VPN? I’m open to solutions with security pros and cons.
2
  1. ZimaOS does not currently support 2FA.
  2. We highly recommend using Zerotier because its core advantage is the use of P2P direct connection solutions and end-to-end encryption of data.
3

Are there any plans to add 2FA-Support?

In my opinion there is no other secure authentication than 2FA

4

+1

5

I’m highly interested in 2FA, however, you can always add 2FA to your WireGuard tunnel and make it even more secure due to encryption.

6

You are right with that, anyway, i prefer to have my apps, icluding the zimaos management website, to be reachable from the internet without VPN, as i want to be able to use them from everywhere and from every device and for most apps, i have different users, that needs to be able to use the services from everywhere and with every device.

I use a proxy manager to reach the Apps via special domains, and the Proxy Manager manges the encryption with lets necrypt. Anyway, 2FA is the only security mechanism, that makes services, that are exposed to the internet, secure.

2FA should be implemented in each and every browser based app. Even if i don’t expose services to the internet, i secure them, if possible, with 2FA.