Two-Factor Authentication for Sub-Account

This is needed!!! Especially if an account holder allows for sub-accounts with full control - the sub account has their own email login and therefore should also have the option to use two step auth with time based tokens (and should be mandatory - to use time based tokens on sub-account if the primary account holder activated two-step authentication)

This definitely needs implementing asap - exactly for the reasons previously mentioned.

Yeah, actually two-factor is useless when some one can use the sub-account to login.

This is a serious security risk that needs to be addressed urgently. We must all continuously improve our security protections. This change should be implemented urgently and I would urge you to escalate it to top priority for immediate action.

Yes, this is definitely needed.

If you make 2FA mandatory for customers, sub-accounts can't login at all as they can't set up 2FA but are trapped in redirects to the 2FA page. This should be considered a bug not a feature request. Fix this please, WHMCS.

This is crazy there is a bug that redirects to 2FA page if you are a contact! Must FIX!!

Is there any update on this? It kind of defeats the purpose of 2FA if the sub-accounts can't have it enabled. Kind of like Putting bolts on the door but leaving your windows open.

I don't understand why this was left out in the first place. It makes no sense.

+1

This is a big security issue. Otherwise, why bother offering 2FA at all?

How is this not implemented already?

It's a little crazy this was let out in the first place.

Yes, last I heard this is not possible. I see no reason to use this before all users are included.

Why is this not a thing yet?

Please inplement this already

crazy it's not already done, whmcs is really understand account security ?!!!!

Any update on this?

It's def not in v7.7.1 which is super disappointing.

Please WHMCS, get this added soon, security is such a huge concern and we require 2 factor...

SSIs this not done yet?

TFA for sub-accounts is an absolute necessity, it's absence is a bug, not a missing feature. Sincerely hope this is introduced soon.

We can't use 2FA until this is in place and I'm sure lots of customers feel the same. Typical WHMCS.

This should add this long time ago

How the heck is this not a thing yet? Sub-Users in many cases have access to almost everything a primary admin does.

Hi,

This "Feature" shouldn't even be for vote personally. We've had some many complaints about the main account / customer/client account been locked with 2FA but then when the "Customer" adds "Sub-account they don't get the option to add 2FA so if the main customer gives full access to the account then this means if the Sub-Account was compromised / hacked then would able to make changes to their services without asking for 2FA. This is serious problem and good way for hackers to able to bypass the security on the main account. Therefore this is security problem that need's to be addressed ASP not waiting for months for WHMCS teams build up votes on.

We need security we need to protected our customers so please take this on broad people please vote for this feature.

Thank You!

Please add this feature

WHMCS: Please add this feature asap.