Extension:EmailAuth/zh

The extension allows two-factor authentication via email. While this is less secure than other two-factor methods such as, this does not have to be set up by the user, it only requires a confirmed email address. As such the extension is mainly meant to be used by system administrators in emergencies (such as a database leak).

The hook is used to decide when the second factor is required.