Two step verification

[proof]

With Google authenticator , it would surely help

[iscon]

Agreed but before that some pw rules enforcement would be helpful. Currently user "a" with pw "b" is possible...

[ares]

Two-factor authentication to provide secure access to the CRM.