2-Step-Verification - every time a user login
Actually a 2-Step-Verification is valid for 30 days. I would like to have the possibility to set this time to 0 days.
Zlata M commented
I vote for ability to turn off this feature. I feel a little stupid to setup 2SV and remember the user on device
Miloslav Cahlik commented
I think this is good idea. I would like to have this feature with configuration vaule of how many days can user connect without 2-step verification. I would prefare 2-4 days max.
Alex Bleeker commented
without this setting to 0 days this 2 step verification is a blown away security.
If my device was stolen and he knew my password he still gets in. with remeber device on 0 days
he had to have my google authenticator to validate again