How to: use two-step verification (2fa)
- Thread starter BlackHat World
- Start date
Society Girl
Elite Member
- Feb 20, 2014
- 3,164
- 2,627
Yeah, for those that aren't a fan of apps, the email option is really simple and means you can use your phone, computer, TV, toaster or whatever else is smart enough to receive emails.
The app is my choice, but we wanted to let users choose.
The app is my choice, but we wanted to let users choose.
- Mar 26, 2019
- 3,520
- 1,800
Lol, yeah email is best option.
Castlevision
Regular Member
- May 31, 2021
- 216
- 92
Since I am forced to choose I guess it will have to be email for me. I hate having to grab some other device to run an app just so I can login somewhere.
You are not forced to do anything you are not an upgraded member.
I suggested this as being mandatory for people abe to sell 2 or 3 years back, at the time it was rejected.
I guess having upgraded members accounts being hacked, then innocent members scammed via PM taking payments in crypto has meant this is a safer option.
There were too many Shitlists where people were scammed by a member, only for us to see that member wasn't online, but their account had been hacked, from an IP the other side of the globe.
Castlevision
Regular Member
- May 31, 2021
- 216
- 92
Yes, but in the future I may become an upgraded member at which time this rule will apply to me. Thanks for explaining the history and your reasoning behind the change.
Society Girl
Elite Member
- Feb 20, 2014
- 3,164
- 2,627
I mean if you don't clear your cache, you'll need to do this every 30 days - not every single time. This is 12 times a year to put some numbers into a field.
It's similar to "Why should I have to put CAPS and punctuation symbols in my password, it's my choice". We're doing it to protect you guys, not as a pnishment. This also reduces tickets/account recoveries etc. when password leaks happen/same passwords used across different websites
.
It's similar to "Why should I have to put CAPS and punctuation symbols in my password, it's my choice". We're doing it to protect you guys, not as a pnishment. This also reduces tickets/account recoveries etc. when password leaks happen/same passwords used across different websites
.
NX_NULL
Banned - Multiple Rules Violations
- Dec 31, 2008
- 717
- 931
this is a punishment for people who upgraded their account because normal members doesnt need to bother and do these steps.I mean if you don't clear your cache, you'll need to do this every 30 days - not every single time. This is 12 times a year to put some numbers into a field.
It's similar to "Why should I have to put CAPS and punctuation symbols in my password, it's my choice". We're doing it to protect you guys, not as a pnishment. This also reduces tickets/account recoveries etc. when password leaks happen/same passwords used across different websites
Society Girl
Elite Member
- Feb 20, 2014
- 3,164
- 2,627
I get your side of it. We love feedback, so we'll take it on board - this is what BHW is about!
Cleast Intwood
Power Member
- Jul 2, 2016
- 689
- 421
Gotta say i really dont like this. But hey its your forum.
- Jun 26, 2018
- 1,150
- 595
It is their forum in terms of ownership, but it was supposed to be more a sharing experience between black hatters, thus acted more like a co-op. The site doesn't own the risks taken by buyers and sellers (to whom it should be shouldered), but has assumed a responsibility to mitigate them it didn't have to. From many past testimonies, BHW used to be primarily a community, with a marketplace. Now it's primarily a marketplace, with a community, and protecting that market is driving their changes. I did the 2FA, but if I had known this was coming before I reupped for JrVip, I probably wouldn't have.
- Feb 4, 2020
- 1,696
- 2,071
my acc is always logged in., do I still need to set up 2FA?
i hate 2FA tbh its time-wasting
curious to know the reason behind this 2FA mandatory decision?
i hate 2FA tbh its time-wasting
curious to know the reason behind this 2FA mandatory decision?
- Mar 22, 2013
- 9,148
- 10,491
Thank you for allowing to do this with email.
I hate them fucking apps
I hate them fucking apps
- Oct 27, 2005
- 84,932
- 22,526
Then you won't be able to log in until it is.
There are many options from email to desktop app to phone.
You only have to do it once a month - 12 times a year which keeps your account secure.
my acc is always logged in., do I still need to set up 2FA?
i hate 2FA tbh its time-wasting
curious to know the reason behind this 2FA mandatory decision?
If set up within the Authy desktop app or password apps like 1 password it's simply another click or you can do it via email which is slightly less secure but better than nothing.
We've decided to make it mandatory due to the increase in benefits for Jr. VIP's over the coming months and for the security of your account going forward it's important to ensure that it's kept secure. It's a couple of seconds for a lot of additional security and benefit.
Thank you for allowing to do this with email.
I hate them fucking apps
No problem.
Treehouse88
Newbie
- Aug 20, 2021
- 43
- 19
I think it would help to know what methods hackers are using to hack in to BHW accounts. Is it through phishing methods or guessing non-complex passwords, or... I usually chose, what I would consider, impossible passwords to guess, but I also think the multiple authentication methods can be a hassle.
badassstriker
Banned - Inappropriate behavior
- Oct 2, 2021
- 14
- 1
It is a nice idea to have an account fully authenticated but to further strengthen 2nd security layer , considering sending verification codes to phone number should also be accommodated rather than code-generating app such as Authy or Google Authenticator
I do not believe or think there is such thing as "impossible passwords" to guess when it has to do with cybersecurity, the more complex you think a cybersecurity is the more it could be broken or penetrated by a very simple algorithm.
Castlevision
Regular Member
- May 31, 2021
- 216
- 92
You can have a really difficult password, but if someone happens to enter it correctly by shear dumb luck, they get in, and your account is compromised anyway! ;-)
HoNeYBiRD
Elite Member
- May 1, 2009
- 10,187
- 12,580
If you meant the backup codes, you can access them or generate new ones here: https://www.blackhatworld.com/account/two-step/backup/manage. You'll need to know your account password to access that page. Since you're logged in, i suppose, that won't be an issue.
It's an English only forum btw.