2FA added

[theymos]

Thanks to PowerGlove, who did 90% of the work on this, the much-requested 2-factor authentication feature has finally been added. You can enable it in your Account Settings, and then you have to give the code when logging in. If you don't have 2FA enabled, you have to leave the OTP field blank when logging in.

If you use the forgotten-password function, then there's an option to remove the 2FA. So 2FA does not provide any protection in case of a compromised email. Make sure that your email address is secure. If you don't want to set an email address, use something like yourUserName@invalid.bitcointalk.org; don't use a random nonsense email like y@x.com, since somebody might create that domain/email.

Let me know if there are any bugs.

[Mia Chloe]

Wow!! ,this is a great leap in security progress. Thanks to PowerGlove and theymos. I am definitely trying this out😁.

[TryNinja]

Thank you, theymos. Just tested it and it's working fine.

[Hazink]

This is a great development, but I just have a question and concern regarding the email type. If the 2FA is enabled and someone has access to your email and wants to use the email to reset the password for someone who has enabled it, can't it be deemed necessary for anyone who has enabled it to either provide the 2FA code before they can be able to successfully reset the password, and if the code is not available, they should be required to pass some form of manual verification?
 
And then again, in respect to someone knowing the other person's password or the account already logged in on a new device before the 2FA is enabled, will the old device where the account is logged in be logged out automatically after the 2FA has been enabled or will the user need to revoke the access manually?
 
And if the old device can still be logged in, can someone change and disable the 2FA without needing to add the code for verification?

[DYING_S0UL]

Finally, the long waited dream came true. Thumbs up to PowerGlove for the effort, and theymos for approving the 2FA feature .

EDIT: 2FA is now enabled and tested it on my account, worked without any problem. Using google authenticator as the authenticating app. (Any other alternative recommended, or it's just fine to use?). Thanks.

[SmartGold01]

Thank you theymos for taking such wonderful decision to secure our account.
Now we can feel relaxed with our account without having to fear about any hack, although I have never tested it to see how it works. I will try it later to feel the cruise.

Thank you.

[shahzadafzal]

Theymos 👏👏👏

Great job, PowerGlove! Excited to see long awaited the 2-factor authentication feature added.

Kudos for the hard work. Testing it out now, and will report any bugs if I come across them.

Just for info first time 2FA was introduced by AT&T in 1996


https://en.m.wikipedia.org/wiki/Multi-factor_authentication

[Myleschetty]

If you use the forgotten-password function, then there's an option to remove the 2FA. So 2FA does not provide any protection in case of a compromised email.

When I first learned about the 2FA features when I wanted to log into my account this is the area I was concerned with based on what I have experienced after the loss of phone where the 2FA application was installed with the saved backup code.
Glad that there's an option to remove the 2FA.

[Dr.Bitcoin_Strange]

Nice work! It's really good that you have integrated the 2FA feature into the forum because it will definitely add additional security to an individual's account, unless for those who get very careless to the extent of releasing all of their information to the hacker whom they fall victims to. I like these new features and will gladly set them up on my account if I am ready.

[BitcoinGirl.Club]

Thanks to PowerGlove, who did 90% of the work on this, the much-requested 2-factor authentication feature has finally been added. You can enable it in your Account Settings, and then you have to give the code when logging in. If you don't have 2FA enabled, you have to leave the OTP field blank when logging in.

I think this was one of the most wanted expected feature everyone had in their list. However for me, I am fine. I have my btc address staked. I think nothing I have to worry.

[Churchillvv]

Well done! Theymos and Power Glove

I did a quick review on the new 2FA feature..
- I enabled the 2FA using the Authenticator app and it gave me a little had time to enable because of the time limit (Expiration of code) of Authenticator while imputing my password to enable 2FA.

- After enabling it was kinda hard too to login because of the same reason above. Though it might be my from my devices response.

-I noticed the pop up notification that warns for incorrect 2FA key (code)

- Also disabled it to find bugs but found non yet, I will key an eye on to find errors on it.

In conclusion using the 2FA you have to be a kinda speedy because the code expires every minutes.
Nice work 👍

[SamReomo]

You have done a great job Theymos by adding that feature into the site. We'll should be thankful to PowerGlove who devoted his time to make that feature possible on the forum. I believe it's one the best features we all wanted to have and thanks to theymos and PowerGlove for adding that to the forum.

[BitcoinGirl.Club]

In conclusion using the 2FA you have to be a kinda speedy because the code expires every minutes.

Have I started to hear the complain now that 2fa code expires too quick 😂?

[shahzadafzal]

Let me know if there are any bugs.

Not bugs but some questions and suggestions.

Why this Confirmation OTP field has to be password filed? I think it should be normal text field.



Specially here



Why the name is like BTCT:u1634314?

I understand u1634314 is my userid but why not "shahzadafzal" more easy to remember specially for those who have multiple accounts.

Also instead of BTCT i think it should be bitcointalk.



Yes I understand we can changed it after adding. But but in Microsoft Authenticator you can't change the userid u1634314. You can only change BTCT to Bitcointalk.

[SatoPrincess]

I never would have thought we would have 2FA on the forum, so many threads have been created on the subject. It shows Theymos does stay current with all that’s going in the forum. Thanks to Powerglove for playing a big role in making this happen. Thank you Theymos for the Christmas gift. I hope we will getting at least one merit source requests approved this holidays.  

In conclusion using the 2FA you have to be a kinda speedy because the code expires every minutes.

Have I started to hear the complain now that 2fa code expires too quick 😂?

Pleassseee I can’t stop laughing

[LTU_btc]

Wow, I really can't believe what I read. 2FA. We were waiting for 2FA for so long and it finally happened. And it's not even April's Fools day joke . We needed it a lot, huge thanks to PowerGlove and theymos !

In conclusion using the 2FA you have to be a kinda speedy because the code expires every minutes.

And I think it's ok, 2FA code should remain active for long.

[nakamura12]

After all the discussions about 2FA and now it's finally implemented in the forum. I can't imagine the pressure it is for theymos when deciding on adding the 2FA or not because of previous discussion of the same topic. Before reading the OP, I checked the title and it says 2FA added then it came to my mind that there might be someone who is behind it. It's still new and there could be bugs and etc. Considering it is added on the forum recently then having someoneo complaining about it already been noticed y many and then fixed later and also it's improvement.

[Marvelman]

I just saw that new one-time password box when I signed in earlier.  Looks like they finally added that two-factor authentication thing people have been asking for.  It's about time theymos made the call to beef up security around here 

I'll test it out later, but it seems like a smooth system theyve put together.  Should make life easier for all of us.

[JeromeTash]

However for me, I am fine. I have my btc address staked. I think nothing I have to worry.

Until your account gets hacked and is used to post malware, leading to a permanent ban. That's when you will realize that the staked BTC address is useless. I think i know someone in this state whose account is still banned up to now despite opening a ban appeal including a signed message.

I got hacked some time back, so I take no chances. 2FA is more than welcome

[DaNNy001]

However for me, I am fine. I have my btc address staked. I think nothing I have to worry.

Until your account gets hacked and is used to post malware, leading to a permanent ban. That's when you will realize that the staked BTC address is useless. I think i know someone in this state whose account is still banned up to now despite opening a ban appeal including a signed message.

I got hacked some time back, so I take no chances. 2FA is more than welcome

Yeah it's definitely more than welcome, I think I have heard of so many people account here also being compromised and a more recent case would be the one that was used to collect a loan from shasan and it's also a huge amount of about 1000$ which the real owner of the account said he had no idea or requested such loan from the service but since the deed has already been done he could only just pay for the loan with interest also included. I think the user was even lucky to actually access the account back because if actually this 2FA was inputted then just maybe such senerio would have been avoided.