多因素认证
Enable multi-factor authentication (MFA) to keep your account secure.
本指南用于在你的 Supabase 用户账号中添加 MFA。如果你想为你 Supabase 项目中的用户启用 MFA,请参考本指南
🌐 This guide is for adding MFA to your Supabase user account. If you want to enable MFA for users in your Supabase project, refer to this guide instead.
多因素身份验证(MFA)通过要求使用第二种因素来验证你的用户身份,为你的账户增加了一层额外的安全保护。Supabase 允许用户在账户上启用 MFA,并将其设置为后续登录的必需条件。
🌐 Multi-factor authentication (MFA) adds an additional layer of security to your user account, by requiring a second factor to verify your user identity. Supabase allows users to enable MFA on their account and set it as a requirement for subsequent logins.
支持的身份验证因素 #
🌐 Supported authentication factors
目前,Supabase 支持向你的用户账户添加一个唯一的基于时间的一次性密码(TOTP),作为额外的安全因素。你可以使用 1Password、Authy、Google Authenticator 或苹果的钥匙串等应用来管理你的 TOTP。
🌐 Currently, Supabase supports adding a unique time-based one-time password (TOTP) to your user account as an additional security factor. You can manage your TOTP factor using apps such as 1Password, Authy, Google Authenticator or Apple's Keychain.
启用多重身份验证 #
🌐 Enable MFA
你可以在你的Supabase 账户设置中为你的用户账户启用多因素认证(MFA)。启用 MFA 后,所有其他用户会话将会被自动注销,并需要使用 MFA 重新登录。
🌐 You can enable MFA for your user account under your Supabase account settings. Enabling MFA will result in all other user sessions to be automatically logged out and forced to sign-in again with MFA.
Supabase 不会返回恢复码。我们建议你注册一个备用的 TOTP 因子,以防你失去对主 TOTP 因子的访问。确保你使用不同的设备和应用,或者将密钥存放在与主设备不同的安全位置。
🌐 Supabase does not return recovery codes. Instead, we recommend that you register a backup TOTP factor to use in an event that you lose access to your primary TOTP factor. Make sure you use a different device and app, or store the secret in a secure location different than your primary one.
出于安全原因,如果你丢失了所有的双重身份验证凭证,我们将无法恢复你账户的访问权限。如有必要,请注册一个备用验证方式。
🌐 For security reasons, we will not be able to restore access to your account if you lose all your two-factor authentication credentials. Do register a backup factor if necessary.
使用多因素认证登录 #
🌐 Login with MFA
一旦你为你的 Supabase 用户账户启用了多因素认证,你将被要求输入你在偏好的 TOTP 应用中看到的第二个验证代码。
🌐 Once you've enabled MFA for your Supabase user account, you will be prompted to enter your second factor challenge code as seen in your preferred TOTP app.
如果你是组织所有者,并且使用的是专业版、团队版或企业版计划,你可以强制要求所有组织成员必须启用多因素认证。
🌐 If you are an organization owner and on the Pro, Team or Enterprise plan, you can enforce that all organization members must have MFA enabled.
禁用多因素认证 #
🌐 Disable MFA
你可以在你的Supabase 账户设置中为你的用户账户禁用多因素认证(MFA)。在之后的登录尝试中,你将不会被要求输入 MFA 代码。
🌐 You can disable MFA for your user account under your Supabase account settings. On subsequent login attempts, you will not be prompted to enter an MFA code.
我们强烈建议你不要关闭多因素认证,以避免你的用户账户被未经授权访问。
🌐 We strongly recommend that you do not disable MFA to avoid unauthorized access to your user account.