Why isnt there Two-factor authentication for Orbi Routers?

---

Retired_Member wrote:

There is only a  'Administration Password' for Orbi Routers.  Why cant there be Two-factor authentication to login to administrate the Router?  A Security key or a Authenticator, like Google Authenticator?

---

"Why?" is impossible to answer, since we are not privy to Netgear internal discussions.  My hypothesis is that the economic case for expending resources on 2FA is not there:

• There is not a huge consumer demand for it, which means there is little justification to expend resources on developing it.
• The vast majority of consumer products do not offer 2FA, which means there is no pressure to "meet the competition."
• If it were available, it would have to be as an option because so many customers would opt to turn it off.
• The trend in consumer electronics is toward ease of use, rather than security.

2FA makes sense when there is something really important to protect, such as financial information, medical records, or even email.

My institution is implementing 2FA for email, including the "whole nine yards" (fobs, smartphone SMS, even calling a land-line telephone and speaking a code), but once authenticated, a device can skip 2FA for 5 days.  What is special about 5 days?

A system that defaults to http rather than https and will not allow the user name to be changed from "admin" is not likely to devote resources to 2FA.  But, since Netgear doesn't explain their decisions, we'll never know.