Hi Steve,

Nice talking to you earlier.

Cloud accounting systems in OZ have 2 factor authenticating as a legal requirement.

You are offering existing members 2FC as an optional feature but could it be a mandatory requirement for future members?

As more and more members join just to buy and sell watches this may be worth considering.

Thank you. I'm guessing that looking for it from my MacBook prevented me from seeing it.

Now for the other dumb question, please: if 2FA is on your phone, will it impede access from the MacBook? :dummy:

Thanks for your patience and help, all.

2 factor authentication cannot be made mandatory, but it is free and easily activated by any member via their "User CP" as explained above.

Any member who fails to activate 2FA on their account, and their account is breached by a scammer, and used to deceive and procure money from an unsuspecting innocent member, may potentially find themselves in a position of legal risk and have some serious explaining to do.

There is no real excuse for not activating 2 factor authentication for your own protection and that of your follow TRF members to make this community more secure.

Of course you must install the Google Authenticator application on your iPhone, iPad or Android phone or tablet.

No activating 2AF will not affect your usage of or access from your Macbook, but you may on occasions be requested to authenticate which is a 10 second process.

Thank you. And thanks for looking out for us (including the slow ones . . . . ).

just activated mine.

thank you steve!

Understand :cheers:

And your work is appreciated. :clap:

Thanks Steve. Done [emoji1360]

Must do this!

Took seconds to do this.

Thanks Steve!

For the record (IT Guy here) I set up the 2FA with Authy, which is another 2FA app.

For people on the fence: it is is EXTREMELY difficult to circumvent Multi-Factor Authentication and you should do this on all of your accounts, especially if you use same password on all of those accounts (very bad practice). They get one, they get all.

If you have not used 2FA before, you should start, really.


:cheers: :thumbsup:

Yes, you are right Authy is a much better App to use than Google Authenticator.

Authy is far better in case you lose your phone.

It's a no brainer really Authy is the way to go.

Steve, thank you for adding this feature. This is an immense improvement in security that we can hope more follow. I have a couple dozen accounts using 2FA via either TOTP or hardware key and look forward to the rest catching up.

Perhaps a small banner at the top would be a good idea?

Excellent. I’m all set. Nice to have that extra security.

Authy is far superior to Google Authenticator.
If you lose your phone or it is stolen then with Google Authenticator you could be in a lot of trouble if you do not have your recovery key. Also with Authy you can have that app on multiple devices and even on Windows and Mac desktop/notebooks.

Attachment 1142448

Thank you so much!


Sent from my iPhone using Tapatalk

It is more flexible and like you said, you can share it across multiple devices. :cheers:

Just installed and activated for TRF

A banner at the top, where do you mean?

Thanks for this. Just installed and set up for TRF and feel better already [emoji1360]


Sent from my iPhone using Tapatalk

Just used the Google authenticator and it was easy - cheers!

Done! Thank for the instructions! [emoji106]

Steve
I think he means on each user’s sidebar frame.

A mock-up sample below.

https://uploads.tapatalk-cdn.com/202...43be14b4cf.jpg


Sent from my iPhone using Tapatalk Pro

While that banner looks really cool the 2FA software does not provide for a banner to be displayed. To install a banner would mean that I would need to hack the 2FA software and that is not something I am prepared to do for a number or reasons.

At the same time:
(a) I expect most if not all users to have 2FA enabled; and
(b) why do we want to give a scammer a road map who has and has not 2FA enabled.

Exactly!

Done! This is a great feature to add to the website Steve, thanks for taking the added step to help protect everyone's accounts. :cheers:

Wait so what to do on Tapatalk?


Sent from my iPhone using Tapatalk

Haven’t done anything with them thus far. No way to get to TRF’s native UserCP from TapaTalk so not able to invoke 2FA from the App...


Sent from my iPhone using Tapatalk Pro

Done

Thank you!

I’m having some problems with the setup. If I’m using Authy why is the setup screen asking for a Google Authentication code?