Hello fellow Drupalers,
I've been given the task of securing our admin account, on our websites (drupal 7) from outsiders.
My first thought was 2FA and I looked at some of the modules (tfa, google auth, etc) and they seem to be doing the job okay.
But as I was fiddling around I accidentally deleted the admin password.
Now I cannot login through the website with the admin account, but I can via drush uli
.
Do you guys consider this to be an okay solution for securing the admin account? I personally have my doubts about it, because it seems so simple...
required="required"
and leave password empty does it log you in?