I’m trying to implement Multi Factor Authentication in PnP for a React Native application. When I register a shared device I see it is shown in device list. I wonder if user can remove that in the device list?
@duynb We do not suggest manually deleting shares as it can affect the private key reconstruction.
You can ask the user to go to app.openlogin.com , navigate to Factor 2: Device (s) where you will see the list. You will have an option to revoke/remove the share.
**NOTE: This is a permanent action and cannot be undone. **
Our team have put a mechanism recently to auto-delete any device shares(sorted by time) if you have more than 5. This way you can avoid manually deleting any shares for user accounts.
Although you can create as many shares as you want, we recommend you create no more than a total of 6 shares, including your device shares and recovery shares. This is because the more shares you create, it increases the size of the tKey state, which can cause performance issues in the frontend and can slow down the login process. Ideally, you should create 2 recovery shares and ask the user for their trusted devices and only store the device share on them.