How to: use two-step verification (2fa)

BlackHat World

Administrator
Staff member
Moderator
Joined
Nov 8, 2005
Messages
157
Reaction score
578
2.0 Update!

In order to keep your account secure, we suggest that you set up two-step verification on your account. Essentially, this will check that you are the owner of the account twice; the first time will be via your password, and the second time via an app (something like Authy or Google Authenticator) or via email.

You can go directly to the two-step verification process via this link, but I'll walk you through it too.

To set up two-step verification, click on your username in the top right corner and click on 'Password and security':

1.png

You will then be taken to this screen, where you can click 'Enable' to set up verification via an app:

4.png


You will be prompted to confirm your password. Enter your password and click 'Confirm':

3.png


You will then be taken to a screen with a QR code:

5.png

Use Authy or Google Authenticator (or equivalent) to scan the QR code. The app will then generate a verification code that you will need to type into the box at the bottom. Then click 'Confirm'.

You will be taken back to this screen, where you can now enable email confirmation:

7.png

You will then be taken to this screen:

6.png
Enter the code that is emailed to you and click 'Confirm'.

And finally, we recommend you copy your backup codes, just in case you lose access to your phone or authenticator app. When you are taken back to this screen, click 'Manage' and save your backup codes somewhere safe:

2.png
Should you ever lose access to your account entirely, you can contact support and, once we have confirmed that you are the owner of the account, we will help you regain access.

Don't have a mobile phone? Try the Desktop Authy App

Support desk guide: https://support.blackhatworld.com/support/solutions/articles/48001186470-2-step-verification
 
Last edited by a moderator:
Have I confirmed my identity or can't I post it in the trading area?
 
Have I confirmed my identity or can't I post it in the trading area?

If you're posting on the forum then you will have confirmed your account. However, only upgraded members can sell their services.
 
Didn't know this feature was added in BHW 2.0. I think everyone should activate 2 steps verification to secure account.
Thanks a lot for making this thread.
 
Didn't know this feature was added in BHW 2.0. I think everyone should activate 2 steps verification to secure account.
Thanks a lot for making this thread.

I think all upgraded members should, to prevent claims of being hacked etc.
 
Thank you so much for the info. I have enabled only mail verification, I have got a list of codes also to use once in case of no access to other authenticity methods. I didn't enable the verification code via the app. Is that mail verification is enough?
 
Thank you so much for the info. I have enabled only mail verification, I have got a list of codes also to use once in case of no access to other authenticity methods. I didn't enable the verification code via the app. Is that mail verification is enough?

Email verification only is better than no verification. Do you 2 factor your email as well, if so you're fine, if not you're better off with the app.
You can't run both at the same time on the same BHW account.
 
It’s very cool that you wrote about this feature, because I missed it in my account settings. I think you should inform about this in your welcome letter! Thank you.
 
Very informative post. I did enabled 2 step verification after watch this video.
 
I see this is now being enforced, I suggested this a while ago.
 
@Don't Panic Do I have to use the APP METHOD? Currently, my 2 step verification is ENABLED but uses EMAIL confirmation
 
I think all upgraded members should, to prevent claims of being hacked etc.
I beg to differ... I'm not going to use my phone number or some app to log in to BHW.
And I doubt, I'd bother with email verification.

PS: can still read about corona on BHW from the best and renowned doctors in the world so I'll be fine.
 
I beg to differ... I'm not going to use my phone number or some app to log in to BHW.
And I doubt, I'd bother with email verification.

PS: can still read about corona on BHW from the best and renowned doctors in the world so I'll be fine.
You'll have to. They'll enforce it for JR VIPs by June 28th. Honestly, you should do it. A little while ago someone logged in to my BlackHatWorld account but FORTUNATELY I had 2fa enabled so my account was never compromised.
 
You'll have to. They'll enforce it for JR VIPs by June 28th. Honestly, you should do it. A little while ago someone logged in to my BlackHatWorld account but FORTUNATELY I had 2fa enabled so my account was never compromised.
OK, so I won't be able to log in. But I'll still have access to the "valuable" information about corona.
 
I beg to differ... I'm not going to use my phone number or some app to log in to BHW.
And I doubt, I'd bother with email verification.

PS: can still read about corona on BHW from the best and renowned doctors in the world so I'll be fine.
You can use your face, if you don't want to use your phone number or email :p
Code:
https://www.forbes.com/sites/kateoflahertyuk/2021/06/11/apple-to-kill-passwords-with-game-changing-new-face-id-move/?sh=3a35e5947083

I don't like this too. Is very annoying. Since I am a developer an clear all my cookies or update my browser daily (nightly version), will be a pain in the ass to log in to my email and get the code, wait for the code (I hope Internet won't go down as it happened a few times with Gmail not so long ago). Right now I still have to fill 2 captcha every time I log in.

EDIT: I see we have backup codes. @praetserge you can use those.
 
It's always an extra PITA, I hate it because of all the extra hassle I have to go through for it. There's got to be a better way!
 
Back
Top