MFA, Passkey, SSO

Multi-factor authentication (planned)

Enable MFA under Settings → Security. Cyber Report supports authenticator apps (TOTP) and email one-time codes as a fallback.

Passkeys (planned)

Passkeys (FIDO2) are the recommended sign-in method — they are phishing-proof and remove passwords entirely. Register one under Settings → Security → Add passkey; a passkey can serve as the MFA factor as well.

Single sign-on (planned, Enterprise)

Enterprise workspaces can require SSO via SAML or OIDC. When SSO is enforced, password sign-in is disabled for the workspace and provisioning follows your identity provider’s groups.