# 2FA should not be required on every login

**URL:** <https://forum.ripe.net/t/2fa-should-not-be-required-on-every-login/1188>\
**Category:** Site Feedback\
**Tags:** website\
**Created:** [14 October 2024 16:41 UTC](https://forum.ripe.net/t/2fa-should-not-be-required-on-every-login/1188 "2024-10-14T16:41:44Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![xsys](https://avatars.discourse-cdn.com/v4/letter/x/34f0e0/32.png) [@xsys](https://forum.ripe.net/u/xsys)\
**Post date:** [14 October 2024 16:41 UTC](https://forum.ripe.net/t/2fa-should-not-be-required-on-every-login/1188/1 "2024-10-14T16:41:44Z")

</div>

Hi team, every time I open `https://atlas.ripe.net/probes/mine` either on PC or mobile, it requires 2FA code, what gets really annoying. Could you please make valid login to last for a couple of weeks, or at least ask for username + password only for some time? Like almost all other services do.

---

<div class="post-metadata">

**Author:** ![decibel](https://avatars.discourse-cdn.com/v4/letter/d/41988e/32.png) [@decibel](https://forum.ripe.net/u/decibel)\
**Post date:** [15 October 2024 03:37 UTC](https://forum.ripe.net/t/2fa-should-not-be-required-on-every-login/1188/2 "2024-10-15T03:37:37Z")

</div>

> [@xsys](#):
>
> `https://atlas.ripe.net/probes/mine`

You only need 2FA if you want to change something on your account.  
Simply to view the performance, you only need [RIPE Atlas - RIPE Network Coordination Centre](https://atlas.ripe.net/probes/1008416/)

or whatever your probe is.

---

<div class="post-metadata">

**Author:** ![xsys](https://avatars.discourse-cdn.com/v4/letter/x/34f0e0/32.png) [@xsys](https://forum.ripe.net/u/xsys)\
**Post date:** [15 October 2024 07:53 UTC](https://forum.ripe.net/t/2fa-should-not-be-required-on-every-login/1188/3 "2024-10-15T07:53:42Z")

</div>

Yes, but I manage multiple probes and need quick overview of their status and connection time, and in most cases I need to get current IP address of the probe, that is not visible without login.

Or maybe allow login through Google or MS account…

---

<div class="post-metadata">

**Author:** ![randy](https://dub1.discourse-cdn.com/flex013/user_avatar/forum.ripe.net/randy/32/453_2.png) [@randy](https://forum.ripe.net/u/randy)\
**Post date:** [16 October 2024 17:17 UTC](https://forum.ripe.net/t/2fa-should-not-be-required-on-every-login/1188/4 "2024-10-16T17:17:47Z")

</div>

i appreciate the 2fa on login. i just wish logins would last longer. and i do not mean a week :). half a day would be helpful.

---

<div class="post-metadata">

**Author:** ![falbrecht](https://avatars.discourse-cdn.com/v4/letter/f/5fc32e/32.png) [@falbrecht](https://forum.ripe.net/u/falbrecht)\
**Post date:** [18 October 2024 14:02 UTC](https://forum.ripe.net/t/2fa-should-not-be-required-on-every-login/1188/5 "2024-10-18T14:02:36Z")

</div>

Hello,

At present, the session time for RIPE NCC Access accounts is set for a period of 8 hours in keeping with best practice, which recommends enforcing an absolute session timeout after a fixed period. We set this with an average working day in mind, so that users are not timed out unnecessarily, while also providing a certain level of security.

Our SSO system currently doesn’t distinguish between the different security levels required by the range of services that we offer. We will look into whether and how we can provide different settings for logging in and session windows for our services in the coming months, most likely in the first quarter of 2025.

Kind regards,  
Fallon Albrecht  
Product Owner

---

<div class="post-metadata">

**Author:** ![xsys](https://avatars.discourse-cdn.com/v4/letter/x/34f0e0/32.png) [@xsys](https://forum.ripe.net/u/xsys)\
**Post date:** [18 October 2024 14:15 UTC](https://forum.ripe.net/t/2fa-should-not-be-required-on-every-login/1188/6 "2024-10-18T14:15:55Z")

</div>

Thank you for the update. Looking forward…
