You must log in or register to comment.
One thing I hate about Immich: Their absolute refusal to bake in basic TOTP auth.
IMHO, I kinda agree with their decision. I see basic auth as just that, user and pass. Anything else should use a proper solution, and there are tons of excellent options.
If you want to go the extra mile, you can roll immich with Autelia / Authentik etc. IDP, and use TOTP on that layer.