Custom Login Page

[jjwb96]

Hi there,

I was wondering if it's possible you override the default login page?

I was hoping to be able to brand it as well as add Google reCAPTCHA v3 and MFA. Similar to wordfence login plug-in for WordPress.

Thanks in Advanced!

[HeyJoel]

No, there's no documented/supported way of overriding the login page. I've added #555 to cover the MFA feature as it is something that needs adding. In terms of security hardening there's several features available:

• You can use the Cofoundry:Admin:DirectoryName to change the admin panel path to something unique or less discoverable, which can mitigate bots / scanning tools that use well-known paths.
• Auth already uses several techniques to mitigate attacks such as rate limiting and randomized execution duration. These features can be configured, as as well as password strength settings to increase security at the expense of usability. See docs for more info.