We have implemented custom MFA where the application will email 4 digit PIN generated. This pin value is assigned to an item and it is kept hidden. However smart users/advanced users can enable the console and do apex.item("P115_MFA_VAL").getValue() and get the value in the console.
Is there any way to prevent this ?
Thank you
Alex