question

johnmikesell avatar image
1 Like"
johnmikesell asked

Why is Forticlient code field obscured?

The most common failure in logging in with FortiClient is that the code value read from the Microsoft Authenticator app somehow isn't typed correctly. This is because one cannot see the value as it is typed in. One can briefly view it with an extra action, but that takes time, so the Authenticator often expires the value as one confirms the entry. Why isn't there an option (like a checkbox) to de-obscure and view the value while one types it in? The Authenticator code is a transient value, so I do not really even understand the purpose of obscuring it. The value will expire within a minute or so. Not like a password that could actually be used by a bad actor.

fortiauthenticator
10 |600

Up to 8 attachments (including images) can be used with a maximum of 1.0 MiB each and 10.0 MiB total.

1 Answer

·
Elmer avatar image
0 Likes"
Elmer answered

Hi Johnmikesell,

I agree that the opportunity to leverage the code if gleaned is quite small and exposing the code is very low risk.

To request the option to see the value as a user is typing, please contact your sales rep to submit a New Feature Request. Unfortunately support, and this forum, are not able to suggest new features.

10 |600

Up to 8 attachments (including images) can be used with a maximum of 1.0 MiB each and 10.0 MiB total.

Write an Answer

Hint: Notify or tag a user in this post by typing @username.

Up to 10 attachments (including images) can be used with a maximum of 1.0 MiB each and 10.0 MiB total.

Welcome to FortiAnswers

FortiAnswers is the space dedicated to FortiSASE and FortiOS questions and suggestions.

  • Please review the Community guidelines
  • If you are a moderator, please refer to the Moderation guidelines
  • If something in the above guidelines is unclear, please post your question to the Community Feedback space or the Moderators' space