Multisig 2FA bot (Beta)

in #multisig17 hours ago (edited)

image.png

<p dir="auto">Our Multisig 2fa bot is now ready for Beta testing.<br /> /!\ Always make sure you have your account's owner key available, to disable the 2FA if needed. <h2>How it works <p dir="auto">To use 2FA by validating One-Time-Passwords (OTP), you give partial authority to a bot to sign for your account, and also keep partial authority over it. The bot will receive signature requests via Hive Multisig and will sign them when the OTP is correct, then broadcast the resulting transaction.<br /> You can use the bot we provide or run your own. <h2>2FA Setup <p dir="auto"><code>2FA (Beta).<span>To set up 2FA, go to <a href="https://multisig.hive-keychain.com" target="_blank" rel="noreferrer noopener" title="This link will take you away from hive.blog" class="external_link">https://multisig.hive-keychain.com , login, then navigate to <p dir="auto"><img src="https://images.hive.blog/768x0/https://files.peakd.com/file/peakd-hive/stoodkev/EoAh3TUaLQQeyzNaDcbAfS8BsencCUrSEENxtNqNkmYcCogmAoeM9qrvrqn1XzdcTDk.png" alt="Screenshot 2024-10-11 at 11.50.36.png" srcset="https://images.hive.blog/768x0/https://files.peakd.com/file/peakd-hive/stoodkev/EoAh3TUaLQQeyzNaDcbAfS8BsencCUrSEENxtNqNkmYcCogmAoeM9qrvrqn1XzdcTDk.png 1x, https://images.hive.blog/1536x0/https://files.peakd.com/file/peakd-hive/stoodkev/EoAh3TUaLQQeyzNaDcbAfS8BsencCUrSEENxtNqNkmYcCogmAoeM9qrvrqn1XzdcTDk.png 2x" /> <p dir="auto">On the next screen, the One-Time-Password secret is generated. Scan the QR Code and verify the code to go to the next page. <p dir="auto"><img src="https://images.hive.blog/768x0/https://files.peakd.com/file/peakd-hive/stoodkev/EonrnwUfR2hCFVYE93iTsjbKFrui1NFuJYfrSZ2vBTH1JiTLdwvD2bp1FSWDStNPBcq.png" alt="Screenshot 2024-10-11 at 11.51.58.png" srcset="https://images.hive.blog/768x0/https://files.peakd.com/file/peakd-hive/stoodkev/EonrnwUfR2hCFVYE93iTsjbKFrui1NFuJYfrSZ2vBTH1JiTLdwvD2bp1FSWDStNPBcq.png 1x, https://images.hive.blog/1536x0/https://files.peakd.com/file/peakd-hive/stoodkev/EonrnwUfR2hCFVYE93iTsjbKFrui1NFuJYfrSZ2vBTH1JiTLdwvD2bp1FSWDStNPBcq.png 2x" /> <p dir="auto"><span>On the final setup page, you need to choose between the default configuration and a custom one. By default, the 2FA bot is <a href="/@multisig-2fa">@multisig-2fa (the account verifying the OTP and deciding whether to sign or not the transaction) and the weight and thresholds are automatically attributed. If you want to use your own bot instead or define different weights and threshold, use the custom tab. <p dir="auto"><img src="https://images.hive.blog/768x0/https://files.peakd.com/file/peakd-hive/stoodkev/Eo2BM1YUXvirxGYoRAdgSypAJUzZPMHZk1m9VjfUyZzr19PsJkmJP5zbYQ3VyJ5X4FB.png" alt="Screenshot 2024-10-11 at 11.54.27.png" srcset="https://images.hive.blog/768x0/https://files.peakd.com/file/peakd-hive/stoodkev/Eo2BM1YUXvirxGYoRAdgSypAJUzZPMHZk1m9VjfUyZzr19PsJkmJP5zbYQ3VyJ5X4FB.png 1x, https://images.hive.blog/1536x0/https://files.peakd.com/file/peakd-hive/stoodkev/Eo2BM1YUXvirxGYoRAdgSypAJUzZPMHZk1m9VjfUyZzr19PsJkmJP5zbYQ3VyJ5X4FB.png 2x" /> <p dir="auto">When you validate your 2FA setup, the secret is encrypted and sent to the bot, and it will be able to verify transactions in the future. <p dir="auto"><img src="https://images.hive.blog/768x0/https://files.peakd.com/file/peakd-hive/stoodkev/Eos1io5fEy85v3VLhcsbU4L5sFe4Pzj3fdgRtSuByDryxAXSMm2c43rCwVkxXBSZvYR.png" alt="Screenshot 2024-10-11 at 12.06.00.png" srcset="https://images.hive.blog/768x0/https://files.peakd.com/file/peakd-hive/stoodkev/Eos1io5fEy85v3VLhcsbU4L5sFe4Pzj3fdgRtSuByDryxAXSMm2c43rCwVkxXBSZvYR.png 1x, https://images.hive.blog/1536x0/https://files.peakd.com/file/peakd-hive/stoodkev/Eos1io5fEy85v3VLhcsbU4L5sFe4Pzj3fdgRtSuByDryxAXSMm2c43rCwVkxXBSZvYR.png 2x" /> <p dir="auto">You can then move to the transactions tab and try a transfer, for instance, the multisig account is automatically detected as a 2FA bot and you will be asked for the OTP before broadcast. Note this tab is just for tests purposes, we will push a new version of Keychain in Beta shortly, that will automatically ask for OTPs on Keychain side, so it will be directly compatible with any frontend that works with Keychain. <h2>Using your own 2FA bot <p dir="auto">You can also run your own 2FA bot to verify your OTPs.<br /> On your own server, clone <a href="https://github.com/hive-keychain/hive-multisig-2fa" target="_blank" rel="noreferrer noopener" title="This link will take you away from hive.blog" class="external_link">this opensource repository and follow the README to properly set up the environment.<br /> We recommend creating a new account that will only be used for this purpose. This account's metadata will be automatically updated so that Hive Multisig, Keychain, and potentially other services recognize this account as a 2FA bot. <p dir="auto">After setting up your server, go to the <a href="https://multisig.hive-keychain.com" target="_blank" rel="noreferrer noopener" title="This link will take you away from hive.blog" class="external_link">Hive Multisig frontend, and go through the process highlighted above. <p dir="auto">On the <code>Multisig 2FA Setup page, make sure you use the <code>Custom<span> tab and enter your own bot account instead of the default <a href="/@multisig-2fa">@multisig-2fa. <h2>Enjoy! <p dir="auto">Looking forward to receiving your feedback and iterating with you guys on <a href="https://discord.gg/DfCergfjaK" target="_blank" rel="noreferrer noopener" title="This link will take you away from hive.blog" class="external_link">our Discord server.<br /><a href="https://peakd.com/keychain/@keychain/hive-keychain-beta-v37-multisig-2fa-integration" target="_blank" rel="noreferrer noopener" title="This link will take you away from hive.blog" class="external_link">here.<span> Read about the <a href="/@keychain">@keychain integration
Sort:  

I have bookmarked this post and will follow the steps shared to get this done. 2FA is must have these days and thanks to you for brining it on hive.

Very cool! It's nice to see features like this being added to our accounts we have put so much time and energy into.

Multisig 2FA is definitely an added advantage and extra security, but I guess, it's the bot that provides this functionality ? I mean hive does not have it in-built, right ?

Congratulations @stoodkev! You have completed the following achievement on the Hive blockchain And have been rewarded with New badge(s)

<table><tr><td><img src="https://images.hive.blog/60x70/https://hivebuzz.me/@stoodkev/upvotes.png?202410131559" /><td>You distributed more than 24000 upvotes.<br />Your next target is to reach 25000 upvotes. <p dir="auto"><sub><em>You can view your badges on <a href="https://hivebuzz.me/@stoodkev" target="_blank" rel="noreferrer noopener" title="This link will take you away from hive.blog" class="external_link">your board and compare yourself to others in the <a href="https://hivebuzz.me/ranking" target="_blank" rel="noreferrer noopener" title="This link will take you away from hive.blog" class="external_link">Ranking<br /> <sub><em>If you no longer want to receive notifications, reply to this comment with the word <code>STOP <p dir="auto"><strong>Check out our last posts: <table><tr><td><a href="/hive-122221/@hivebuzz/lpud-202410"><img src="https://images.hive.blog/64x128/https://i.imgur.com/pVZi2Md.png" /><td><a href="/hive-122221/@hivebuzz/lpud-202410">LEO Power Up Day - October 15, 2024

Thanks for the awesome work! I know you’ve talked about it in your HF presentation. Great to see it in Beta; will check more about this and give it a test too.

Thanks for this incredible work that you are doing to make hive superb and safe. I will go through this and set up accordingly.

Saved these instructions for easy access in future. It sounds simple even for someone as a-technical as me :) Thank you!!

This so amazing. I love the new development, thanks so much for sharing this i will give a try.

PIZZA!

$PIZZA slices delivered:
(9/10) @danzocal tipped @stoodkev

That's great, thanks for making something good even better!

Great news! Thanks

@tipu curate