TFA

Two factor authentication

Two factor authentication (a form of multifactor authentication) requires an additional form of authentication in order to access a resource. This increases security and reduces the risk of account compromise by requiring a different "factor" in order to login. For these forums, the primary factor is your password, which is considered to be "something you know". Our implementation of two factor authentication requires you to provide "something you have", in the form of either a code generated in an authenticator app, or a physical security key if your device and browser supports it.


Two factor authentication is currently optional for faction members below the rank of Lieutenant. It is our recommendation that all faction members configure TFA in order to better enhance the security of our forums.


What do I need in order to configure TFA?
  • A TOTP based authentication app on your phone or mobile device such as Google Authenticator or Authy OR
  • A physical security key such as a Yubikey, and a compatible web browser
How do I configure TFA?

Configuring two factor authentication is super easy. Go to your User Control Panel and select the "two factor authentication" tab, or click here. Select your desired authentication method from the dropdown in the bottom right and press "add new key". For OTP, you will be required to scan a QR code in to your authenticator app and provide the generated code.


What if I lose access to my TFA method?

We highly recommend ensuring you have a backup of your TFA method. If you lose access to your TFA method, you will be unable to login to the forums. If this happens, please reach out to a member of Executive Staff for assistance. Please note that regaining access can take some time if we have to involve server administration to verify your identity.


When will I be prompted to use TFA?

You will be prompted to authenticate with TFA after logging in with your primary authentication method (your password). This is either when logging in to the forums, or when authenticating to the ACP.