Supabase Introduces Multi-factor Authentication

Dec 14th, 2022Product
  • Supabase has released Multi-factor Authentication (MFA) to enhance security for user applications.

  • The MFA implementation includes support for Time-Based One-Time Passwords (TOTP) using QR codes or manual secret entry.

  • MFA flow consists of an enrollment procedure to exchange a secret key and a verification process for subsequent logins.

  • Integration with Postgres Row Level Security (RLS) allows for enforcement of MFA at the database level using claims in JWTs.

  • Future updates will consider support for WebAuthn, FIDO2 devices, and email notifications for MFA-related activities.

Recent Product News