Bitcoin Forum

Nowadays people afraid for their security some time we click the different phising site and lost our account. Hacker is more creative now because they create a phishing site like as original site and people visit and lost their asset. So if you want to secure your account set up 2-Step Verification and install Google Authenticator app on your mobile phone. As a result when you log in your account need to Google Authenticator code and I think its increase security any account. Now many exchangers add 2-Step Verification when you create your account. But the most important thing always kept your security code any safe place . Download link https://play.google.com/store/apps/details?id=com.google.android.apps.authenticator2&hl=en (https://play.google.com/store/apps/details?id=com.google.android.apps.authenticator2&hl=en). I hope its help for newbie and who don't know about set up 2-Step Verification. Think

Very good advice, but pay attention：
Things get very troublesome when you lost your Google Authenticator.
So be sure to back up your authentication private key at any time.
Usually it is hidden, you need to click to “show” to get it.
https://i.imgur.com/Ohywgia.png

There are also alternatives to Google Authenticator. I use Authy because it allows me to sync my account on multiple devices, so even if I lost one, I would not be locked out of my accounts. I can even use it on desktop. So do some digging and choose the best option for you.

This has been treated a few times lately on this section of Beginners & Help:

 [Guide] How to Enable 2FA using Google Authenticator! (https://bitcointalk.org/index.php?topic=5041789.0)
An extra layer of security - Back up your 2FA (https://bitcointalk.org/index.php?topic=5059162.0)
2FA - Important Precautions with Google Authenticator (https://bitcointalk.org/index.php?topic=3178131.0)

It is a recurring topic that we need to pay attention to, but perhaps a little redundant since it has been talked about recently as seen in the above references.

Also to note, you might want to use Authy app rather than google authenticator. As it automatically backs up your details into the cloud so you can retrieve it in case you lose your device.

If you're already using Google authenticator you may want to manually back up by disabling it and then enabling 2FA and copy down the unique code and keep in a safe place.

You think so too? After I share the guide after some time it's been discussed lately in the same board where I posted the guide but i guess I we can't help to stop users to create their own thread with the same topic all over again.

Nice effort op but you can also use another authenticator like authy and more authenticators not just google authenticator try to broaden your knowledge on authenticating accounts to make it secured.

This is a very important topic but it's been discussed more than once in the forum. The only let down I have here is that the forum does not support 2fa authenticator

Actually a phishing site can also capture your 2FA inputs. They can log in with your credentials and your 2FA as you type in real time. First line of defense is to make sure the site you're visiting is real.


Bitcointalk doesn't need 2FA - no monetary value to steal for the risk of getting caught.

And just to add on, there are other 2FA available apart from Google Authenticator and Authy.

For those who own a hardware wallet eg. Trezor and Ledger, you already have a device that can act as a 2FA. See: link (https://www.dongleauth.info/dongles/)

For a list of services compatible with such wallets see this:link (https://www.dongleauth.info/)

If you're trying to just secure your Bitcointalk account, changing your account password every few months is just fine in my experience. I do this every now and then and my account hasn't been compromised since I started it. Ideally we'd get 2FA on this forum and that would add another level of security on top of just having passwords, but if you're not using your account password elsewhere you will be fine.

I use Authy in conjunction with Google Auth as well. Backups are available for Authy as others have mentioned here, and I overall find Authy to be much more feature-rich than Gauth.

Sure, there is no monetary value but why the heck people still hack bitcointalk accounts. I've seen many threads that tackle hacked accounts especially last year when people are having hard time to rank up and don't want to deal with merit. Otherwise, the least  we can do is to prove with signed message of our bitcoin address.

People can easily sell accounts for hundreds of dollars (specially if there is merit on it and a 14-spam every 14 days isn't enough anymore to rank up). There are plenty of campaigns that can make you even in a few weeks. You could also use it to scam or "buy trust" for your project. There are many reasons for people to buy accounts.

Yeah that's true using google authenticator for login or making withdraw on any exchange, but don't forget to back up your security key  ;)

I still feel that Google and security/privacy are contradictory terms. Knowledge and safe working procedures still seem to be the best safeguards.