We have now introduced a feature that shows LIR administrators whether or not two-factor authentication (2FA) has been enabled by users on their LIR account. This feature allows LIR administrators greater insight into the security measures being implemented within their teams. Please note that only admins have access to this feature.
We have also strengthened password requirements and added a reminder to enable 2FA when users log in to their RIPE NCC Access accounts. This is an interim measure until mandatory 2FA is rolled out. Our quarterly roadmaps have been updated to expedite the rollout of mandatory two-factor authentication. The rollout is currently planned to take place towards the end of Q1 2024.
Additionally, we have increased our efforts to actively identify leaked credentials available online and to reset those passwords. The password reset process for any credentials identified as leaked through our monitoring system has been automated.
We urge all members to be mindful of their password security and to enable two-factor authentication. Please follow our security recommendations: