Ghost introduces email-based 2FA and device verification

Ghost has improved its security for staff user authentication with the introduction of device verification and email-based two-factor authentication (2FA). Now, users signing in from an unrecognized device receive a 6-digit code via email, adding an extra layer of protection to all Ghost sites by default. Administrators can also opt to enable 2FA codes for every login attempt, this option is accessible under the security settings for staff users.