<![CDATA[#Immich does not have 2FA and the devs made clear, it's not coming.]]> does not have 2FA and the devs made clear, it's not coming.

The reasoning against is pretty weak.

This thread is ✅️ (for me). Points were made.

@homelab

]]>https://forum.fedi.dk/topic/6e9c3f88-e2a6-4712-9157-0e7d374a1639/immich-does-not-have-2fa-and-the-devs-made-clear-it-s-not-coming.RSS for NodeFri, 11 Sep 2026 13:53:00 GMTSun, 06 Sep 2026 20:21:54 GMT60<![CDATA[Reply to #Immich does not have 2FA and the devs made clear, it's not coming. on Wed, 09 Sep 2026 16:11:44 GMT]]>@silmaril @preya @panda @homelab Very nice - thanks a lot!

]]>https://forum.fedi.dk/post/https://fedifreu.de/ap/users/115895439005760263/statuses/117241957846740576https://forum.fedi.dk/post/https://fedifreu.de/ap/users/115895439005760263/statuses/117241957846740576Wed, 09 Sep 2026 16:11:44 GMT<![CDATA[Reply to #Immich does not have 2FA and the devs made clear, it's not coming. on Wed, 09 Sep 2026 16:10:07 GMT]]>@abulling
I think the immich fork Noodle improves this.

https://github.com/open-noodle/gallery

@preya @panda @homelab

]]>https://forum.fedi.dk/post/https://chaos.social/users/silmaril/statuses/117241951488520840https://forum.fedi.dk/post/https://chaos.social/users/silmaril/statuses/117241951488520840Wed, 09 Sep 2026 16:10:07 GMT<![CDATA[Reply to #Immich does not have 2FA and the devs made clear, it's not coming. on Wed, 09 Sep 2026 09:34:22 GMT]]>@thedoctor @vb @preya @panda @homelab @donncha Tried it as well. Didn't like it either.

Immich is by far the most promising/nice looking software for this in my opinion. But (so far) it still lacks several features that unfortunately prevent me from switching to it completely.

We need user groups - otherwise sharing albums etc is a nightmare once you have more than a handful of people using it.

And shared albums should offer the same functionality as "normal" ones. I don't want to have duplicates or miss out images that show a particular person because Immich can't run duplicate/face detection in shared albums.

]]>https://forum.fedi.dk/post/https://fedifreu.de/ap/users/115895439005760263/statuses/117240395341982992https://forum.fedi.dk/post/https://fedifreu.de/ap/users/115895439005760263/statuses/117240395341982992Wed, 09 Sep 2026 09:34:22 GMT<![CDATA[Reply to #Immich does not have 2FA and the devs made clear, it's not coming. on Wed, 09 Sep 2026 09:28:54 GMT]]>@abulling @vb @preya @panda @homelab @donncha There is also Photoprism, but I have no experience with it. Perhaps it might be worth looking into.

]]>https://forum.fedi.dk/post/https://polymaths.social/users/thedoctor/statuses/01M22QZBDFJGV6RAVZ56Z9PTSGhttps://forum.fedi.dk/post/https://polymaths.social/users/thedoctor/statuses/01M22QZBDFJGV6RAVZ56Z9PTSGWed, 09 Sep 2026 09:28:54 GMT<![CDATA[Reply to #Immich does not have 2FA and the devs made clear, it's not coming. on Wed, 09 Sep 2026 09:14:47 GMT]]>@abulling @vb @preya @panda @donncha Just in case you want to track this, note that this seems to be the #1 item in the Immich roadmap (not that I think order is that important): https://immich.app/roadmap
And is being tracked here: https://github.com/immich-app/immich/issues/12614

I haven't decided yet on Immich vs Ente Photos here.

]]>https://forum.fedi.dk/post/https://social.treehouse.systems/users/Aissen/statuses/117240318364854739https://forum.fedi.dk/post/https://social.treehouse.systems/users/Aissen/statuses/117240318364854739Wed, 09 Sep 2026 09:14:47 GMT<![CDATA[Reply to #Immich does not have 2FA and the devs made clear, it's not coming. on Wed, 09 Sep 2026 08:53:18 GMT]]>@vb @preya @panda @homelab @donncha Same here. This (and the missing user groups) is the reason I don't use Immich as our image archive solution.

I briefly tried Ente but it felt/looked too limited in terms of functionality.

]]>https://forum.fedi.dk/post/https://fedifreu.de/ap/users/115895439005760263/statuses/117240233869559028https://forum.fedi.dk/post/https://fedifreu.de/ap/users/115895439005760263/statuses/117240233869559028Wed, 09 Sep 2026 08:53:18 GMT<![CDATA[Reply to #Immich does not have 2FA and the devs made clear, it's not coming. on Wed, 09 Sep 2026 08:46:06 GMT]]>@abulling @preya @panda @homelab @donncha This is the reason I still use Apple Fotos with shared library. is only the backup solution. I will check and whether they have a better solution. But I still like .

]]>https://forum.fedi.dk/post/https://sueden.social/ap/users/116466000055299971/statuses/117240205526291277https://forum.fedi.dk/post/https://sueden.social/ap/users/116466000055299971/statuses/117240205526291277Wed, 09 Sep 2026 08:46:06 GMT<![CDATA[Reply to #Immich does not have 2FA and the devs made clear, it's not coming. on Wed, 09 Sep 2026 08:00:57 GMT]]>@abulling @panda @homelab I know that a lot of sharing things are currently being worked on. So I'd hope that some of these things will be fixed in the upcoming releases.

]]>https://forum.fedi.dk/post/https://mastodon.social/users/preya/statuses/117240028030432239https://forum.fedi.dk/post/https://mastodon.social/users/preya/statuses/117240028030432239Wed, 09 Sep 2026 08:00:57 GMT<![CDATA[Reply to #Immich does not have 2FA and the devs made clear, it's not coming. on Wed, 09 Sep 2026 07:03:17 GMT]]>@tandemblog @hrafnagud @panda @homelab
Very true. Not everyone likes to have so many things. I have 40+ TOTPs myself.

]]>https://forum.fedi.dk/post/https://mastodon.fbin.in/ap/users/115968153178175357/statuses/117239801300574722https://forum.fedi.dk/post/https://mastodon.fbin.in/ap/users/115968153178175357/statuses/117239801300574722Wed, 09 Sep 2026 07:03:17 GMT<![CDATA[Reply to #Immich does not have 2FA and the devs made clear, it's not coming. on Wed, 09 Sep 2026 07:01:51 GMT]]>@tandemblog @hrafnagud @panda @homelab
1 at a time tbvh.
I mean TOTP first, so that at least the basic need is implemented. Rest can come at a later stage if possible. The more ask gets chipped, the more the word NO gets chanted by the devs.

I do understand it all can be done. It also begs the question of a maintainer. Even smaller changes or updates at times may break something. One reason why I said, just implement the basis TOTP at least.

]]>https://forum.fedi.dk/post/https://mastodon.fbin.in/ap/users/115968153178175357/statuses/117239795636337306https://forum.fedi.dk/post/https://mastodon.fbin.in/ap/users/115968153178175357/statuses/117239795636337306Wed, 09 Sep 2026 07:01:51 GMT<![CDATA[Reply to #Immich does not have 2FA and the devs made clear, it's not coming. on Wed, 09 Sep 2026 07:01:02 GMT]]>@preya @panda @homelab Ah, right. Now I remember what the issue was (it's been a long time since I last looked into this but my browser history showed what I had been looking into):

https://odd.blog/2026/01/16/creating-a-shared-photo-library-in-immich/

"While Immich has shared albums, they don’t quite solve this problem. The photos don’t appear in search and aren’t processed for face recognition or analysis."

The article proposes a solution based on an external library. That's why I still remembered this "solution"...

]]>https://forum.fedi.dk/post/https://fedifreu.de/ap/users/115895439005760263/statuses/117239792402919466https://forum.fedi.dk/post/https://fedifreu.de/ap/users/115895439005760263/statuses/117239792402919466Wed, 09 Sep 2026 07:01:02 GMT<![CDATA[Reply to #Immich does not have 2FA and the devs made clear, it's not coming. on Wed, 09 Sep 2026 06:51:30 GMT]]>@preya @panda @homelab Hm, I wonder as well how I missed this. I had even asked in a forum and people referred to the "external library" function instead. 🤦‍♂️

Thanks a million!

Do they also support user groups by now (did I miss that as well)?

]]>https://forum.fedi.dk/post/https://fedifreu.de/ap/users/115895439005760263/statuses/117239754916569986https://forum.fedi.dk/post/https://fedifreu.de/ap/users/115895439005760263/statuses/117239754916569986Wed, 09 Sep 2026 06:51:30 GMT<![CDATA[Reply to #Immich does not have 2FA and the devs made clear, it's not coming. on Wed, 09 Sep 2026 06:49:02 GMT]]>@abulling @panda @homelab This has been a feature for ages. Not sure why you think that's missing. It's even described here in the docs: https://docs.immich.app/features/sharing/

]]>https://forum.fedi.dk/post/https://mastodon.social/users/preya/statuses/117239745269284033https://forum.fedi.dk/post/https://mastodon.social/users/preya/statuses/117239745269284033Wed, 09 Sep 2026 06:49:02 GMT<![CDATA[Reply to #Immich does not have 2FA and the devs made clear, it's not coming. on Wed, 09 Sep 2026 06:46:39 GMT]]>@preya @panda @homelab I create an album, add some pictures, and can then share it with other users on the same instance. I can set whether they can only view or also edit the album. If so, they can also add pictures etc

I know that there is an "external library" but this is for a different purpose and doesn't provide the functionality of a shared album.

]]>https://forum.fedi.dk/post/https://fedifreu.de/ap/users/115895439005760263/statuses/117239735846803224https://forum.fedi.dk/post/https://fedifreu.de/ap/users/115895439005760263/statuses/117239735846803224Wed, 09 Sep 2026 06:46:39 GMT<![CDATA[Reply to #Immich does not have 2FA and the devs made clear, it's not coming. on Wed, 09 Sep 2026 06:45:51 GMT]]>@abulling @panda @homelab What's your specific definition of a "shared folder" in Immich?

]]>https://forum.fedi.dk/post/https://mastodon.social/users/preya/statuses/117239732747719854https://forum.fedi.dk/post/https://mastodon.social/users/preya/statuses/117239732747719854Wed, 09 Sep 2026 06:45:51 GMT<![CDATA[Reply to #Immich does not have 2FA and the devs made clear, it's not coming. on Wed, 09 Sep 2026 06:44:33 GMT]]>@preya

Exactly! Either remove user+pass entirely and rely solely on oauth/oidc or add a means of 2FA for user+pass.

user+pass is incomplete without 2FA in it's current state.

@homelab

]]>https://forum.fedi.dk/post/https://pandas.social/users/panda/statuses/117239727604583225https://forum.fedi.dk/post/https://pandas.social/users/panda/statuses/117239727604583225Wed, 09 Sep 2026 06:44:33 GMT<![CDATA[Reply to #Immich does not have 2FA and the devs made clear, it's not coming. on Wed, 09 Sep 2026 06:33:19 GMT]]>@panda @tandemblog @hrafnagud @homelab Exactly, that‘s why i‘m rolling out pocket-id for all my personal services. https://pocket-id.org

]]>https://forum.fedi.dk/post/https://hachyderm.io/users/goebelmeier/statuses/117239683443190714https://forum.fedi.dk/post/https://hachyderm.io/users/goebelmeier/statuses/117239683443190714Wed, 09 Sep 2026 06:33:19 GMT<![CDATA[Reply to #Immich does not have 2FA and the devs made clear, it's not coming. on Wed, 09 Sep 2026 06:26:43 GMT]]>@tandemblog

I initially implemented multiple login methods in my applications by using existing libraries

I'd really just need one TOTP slot. No WebAuthn, Passkeys or whatever. Just a single means of 2FA.

OAuth / OIDC is great. 100%. I just think it's not a good idea to provide a login with username + password, but then not provide TOTP.

Just remove user+pass auth entirely and rely solely on OAuth/OIDC, if user+pass cannot be secured with TOTP / what ever.

@hrafnagud @homelab

]]>https://forum.fedi.dk/post/https://pandas.social/users/panda/statuses/117239657494225400https://forum.fedi.dk/post/https://pandas.social/users/panda/statuses/117239657494225400Wed, 09 Sep 2026 06:26:43 GMT<![CDATA[Reply to #Immich does not have 2FA and the devs made clear, it's not coming. on Wed, 09 Sep 2026 06:18:09 GMT]]>@preya @panda @homelab The most severe major flaw in IMO is that they don't support proper shared albums. For whatever reason.

]]>https://forum.fedi.dk/post/https://fedifreu.de/ap/users/115895439005760263/statuses/117239623787277354https://forum.fedi.dk/post/https://fedifreu.de/ap/users/115895439005760263/statuses/117239623787277354Wed, 09 Sep 2026 06:18:09 GMT<![CDATA[Reply to #Immich does not have 2FA and the devs made clear, it's not coming. on Wed, 09 Sep 2026 06:10:22 GMT]]>@panda @homelab Yeah this is one of the only major flaws of Immich. It just makes no sense. Here’s a service that needs external access to work properly - yet you can’t secure it with MFA (only when using an external IdP).

]]>https://forum.fedi.dk/post/https://mastodon.social/users/preya/statuses/117239593212017789https://forum.fedi.dk/post/https://mastodon.social/users/preya/statuses/117239593212017789Wed, 09 Sep 2026 06:10:22 GMT<![CDATA[Reply to #Immich does not have 2FA and the devs made clear, it's not coming. on Wed, 09 Sep 2026 05:32:38 GMT]]>@fbinin @hrafnagud @panda @homelab Furthermore I like to manage my credentials and MFA settings in one place instead of in multiple applications. My services a home grew to the point I already have 14 applications using Keycloak as OTP service. Additionally a Single Sign On requires less support for family members. (I'm aware not every one wants to operate so many applications)

]]>https://forum.fedi.dk/post/https://social.kobelnet.be/ap/users/116699600450459993/statuses/117239444863287561https://forum.fedi.dk/post/https://social.kobelnet.be/ap/users/116699600450459993/statuses/117239444863287561Wed, 09 Sep 2026 05:32:38 GMT<![CDATA[Reply to #Immich does not have 2FA and the devs made clear, it's not coming. on Wed, 09 Sep 2026 05:26:21 GMT]]>@fbinin @hrafnagud @panda @homelab But a good TOTP implementation takes some effort too if you want to support multiple devices and recovery codes. The library updates are probably not because of TOTP itself, the might be required due to the libraries dependencies or framework integrations. Furthermore, if TOTP is implemented, why not add WebAuthn/Passkeys too?

]]>https://forum.fedi.dk/post/https://social.kobelnet.be/ap/users/116699600450459993/statuses/117239420157223233https://forum.fedi.dk/post/https://social.kobelnet.be/ap/users/116699600450459993/statuses/117239420157223233Wed, 09 Sep 2026 05:26:21 GMT<![CDATA[Reply to #Immich does not have 2FA and the devs made clear, it's not coming. on Wed, 09 Sep 2026 04:32:10 GMT]]>@hrafnagud @tandemblog @panda @homelab
But but, TOTP is much simpler to implement and does not have several changes or does not need many updates. OAUTH can change implementation logic and unless kept updated by the user, it may not work or may lock one out (I guess). These are pics, which are sensitive and have several data which can be parsed. TOTP obviously is not hard to implement.
Also, TOTP can be implemented once, and not updated, it will still work.

]]>https://forum.fedi.dk/post/https://mastodon.fbin.in/ap/users/115968153178175357/statuses/117239207044508778https://forum.fedi.dk/post/https://mastodon.fbin.in/ap/users/115968153178175357/statuses/117239207044508778Wed, 09 Sep 2026 04:32:10 GMT<![CDATA[Reply to #Immich does not have 2FA and the devs made clear, it's not coming. on Wed, 09 Sep 2026 04:09:15 GMT]]>@tandemblog @panda @homelab Good point - thanks for sharing your thoughts on that one! 👍🏻

]]>https://forum.fedi.dk/post/https://runespaces.com/users/hrafnagud/statuses/01M225P3GMFNJ0THWJHPAN1JKZhttps://forum.fedi.dk/post/https://runespaces.com/users/hrafnagud/statuses/01M225P3GMFNJ0THWJHPAN1JKZWed, 09 Sep 2026 04:09:15 GMT