Starting June 1, two-factor authentication will be mandatory for all Gosuslug users, said Maksut Shadayev, head of the Ministry of Digital Development. In addition, the department announced the launch of a project to search for vulnerabilities in the portal.
From March 1, Gosuslugakh will technically be able to add another authentication factor.
The Minister spoke about the work to strengthen the security of the portal. According to him, today the username and password are enough to access the account. The department considers that these protection measures are insufficient, so they are preparing to introduce an additional factor. According to Shadayev, some users expose easy login details, which can lead to their accounts being hacked.
The agency is also launching a bug bounty program to identify vulnerabilities in Gosuslugi on two platforms at once: BI.ZONE and Positive Technologies. Participants who find bugs will be able to receive a reward of up to 1 million rubles.
The Ministry of Digital Transformation explained that the program will be developed in several stages: first, independent experts will examine the portal and the Unified Identification and Authentication System, and then the conditions will be announced.
Author:
Natalia Gormaleva
Source: RB

I am a professional journalist and content creator with extensive experience writing for news websites. I currently work as an author at Gadget Onus, where I specialize in covering hot news topics. My written pieces have been published on some of the biggest media outlets around the world, including The Guardian and BBC News.