buffalojim
Royal Flush
You probably did this but maybe double check your spam folder?
-
This site contains affiliate links. If you choose to make a purchase after clicking a link, Poker Chip Forum may receive a commission at no additional cost to you. Thank you for your support!
Two-step verification (2FA) now required on all accounts (3 Viewers)
- Thread starter Tommy
- Start date
- Status
I did. Tommy said sometimes it doesn’t work. Sounds like a crap system. Somebody is going to get locked out of their account
buffalojim
Royal Flush
I haven't used the email 2FA, just an app on my phone that generates a number. Not sure why the email being sent would be an issue but yeah, I agree, not ideal. As I've said, I use an app called Google Authenticator and never had an issue once, if that's of any help to you.
It’s not my phone. It’s my laptop. There are more layers here than my online banking
buffalojim
Royal Flush
I know, but the app will generate a number that you enter on whatever device you're using to login, not just for your phone.
check your spam folder? i don’t use email for 2FA so not much help.
yeah you get the code on your phone (or in my case, watch) but use to log into whatever other device you are using.
OP
OP
Let's put that into context. Email is unreliable because ISPs and email services have unknown algorithms (among other things) that either send it to your spam/junk folder or block it altogether. There are no errors on the PCF side with sending the email. I pay to send emails through Amazon web services vs sending emails through the PCF server for free because it is more reliable and it frees up resources. AWS SES gives me better data on the number of emails being sent, bounces, etc.
There are probably a dozen members here that will tell you that I contacted them when they reported one of our emails as spam. 99% of the time it was an error and they go back and mark it as not spam. I'm vigilant at keeping my AWS sending IPs in perfect standing. I am doing everything I can on my end to make sure our forum notifications and other emails are getting sent. I see no errors with sending any emails in the last 24 hours.
That's why I recommend using a 2FA on your phone. The codes are always there and you can use them to sign in to PCF on your phone, laptop, tablet, desktop, Xbox, PlayStation, smart TV, and just about anything that has a web browser.
I use a 2FA app for just about everything and never had an issue logging in.
I have 2FA set up for 11 accounts, never had a problem. And faster than waiting around for an email to come 
OP
OP
Everything baby! Peace of mind.
No delivery errors since Jan 8th and that was due to the receiver being over their quota. That's when the ISP or email service is nice enough to send back a message to let me know.
OP
OP
I will be adding a new feature in the next day or so that will allow you to "remember this device" for 60 days instead of 30 days.
For current members, you will get the 60-day option the next time you are prompted to re-verify your device.
For current members, you will get the 60-day option the next time you are prompted to re-verify your device.
Oh man. Thanks!
luvpokerchips
Pair
I am having enough trouble accessing pokerchipforum.com
How do I re-generate a new QR code to add authenticator? I upgraded my iPhone and it no longer shows the PCF account.
OP
OP
What app are you using? The MS one lets you back up your accounts then restore them on the new device.
In any case....
When you're done that, you may want to do this step next.
Thank you Tommy!
B1GSL1CK
Sitting Out
As someone who works in Cyber, I'm really happy to see that the site takes security seriously with this requirement.
Cheers!
Cheers!
OP
OP
FYI for those who are getting new phones. If you use a 2FA app, make sure you backup your accounts on the old phone and recover them in the 2FA app on the new phone BEFORE you reset your old phone.
I just moved all my 2FA accounts in Microsoft Authenticator to my new phone in less than a minute. I can tell you how to do it in MS Authenticator.
First, make sure you have chosen to back up your accounts in the MS 2FA app on your old phone. Open the MS 2FA app, click on the 3 dots at the top right, go to settings, make sure cloud backup is toggle on.
On your new phone, open the MS Authenticator app, but do not add any accounts. You must choose the recovery account option. Enter your MS email and password to start the recovery. If you have 2FA setup on your MS account, you will get an 2FA push alert on your old phone and the option to pick the correct number that is shown on your new phone. After that the recovery will start and all your accounts will show in the list.
Once that is done, you want to make cloud backup is toggle on for the new phone in the MS Authenticator app.
I just moved all my 2FA accounts in Microsoft Authenticator to my new phone in less than a minute. I can tell you how to do it in MS Authenticator.
First, make sure you have chosen to back up your accounts in the MS 2FA app on your old phone. Open the MS 2FA app, click on the 3 dots at the top right, go to settings, make sure cloud backup is toggle on.
On your new phone, open the MS Authenticator app, but do not add any accounts. You must choose the recovery account option. Enter your MS email and password to start the recovery. If you have 2FA setup on your MS account, you will get an 2FA push alert on your old phone and the option to pick the correct number that is shown on your new phone. After that the recovery will start and all your accounts will show in the list.
Once that is done, you want to make cloud backup is toggle on for the new phone in the MS Authenticator app.
Google Authenticator did recently add this capability. But like Tommy said, you have to do this backup/export before resetting your old phone.Yeah, not all authenticators allow that exporting/importing data.I hope there's a backup solution in place to reset the account in such cases?
OP
OP
Where, here? If so, it's the one-time use backup codes you are suppose to save which will let you get back into your account (if you get locked out) to reset your 2FA settings. Then you set it up again with the app on the new phone.
B1GSL1CK
Sitting Out
Yeah, not all authenticators allow that exporting/importing data.
My understanding is that Google Authenticator as well as Microsoft Authenticator both allow exporting/saving backup keys which will allow the recovery on an alternate device. I would equate it to a 24 word seed phrase that can be used to recover your offline crypto wallet in the event that it is lost or stolen. I got a new phone a few months ago and I had to scan a series of QR codes from the old phone with the new one in order to do a direct export/import. That is probably the easiest way to go about it.
B1GSL1CK
Sitting Out
Oh yeah, if the old one's not available you're really at your own mercy if you wrote down those pesky backup codes or not.
Also not sure if folks are aware but 2 factor applications (e.g., Google, Microsoft, Authy) are the way to go over traditional SMS which is tied to your cell phone number. As more folks are getting into cryptocurrency, SIM swapping is becoming a hot trend and attackers will attempt to call your phone carrier and swap your SIM to theirs effectively bypassing SMS as a good choice for 2FA. Some carriers allow you to place a "lock" on your SIM but these schemes are becoming so sophisticated that there are insiders at the phone companies.
Nex
Flush
What I just do is I scan the QR code that is shown when setting up 2FA with a generic QR scanner app that gives me the plain text data contained in the QR code, and save that off in my password manager alongside the login credentials. Essentially it's a special URI that begins with otpauth://totp/xxx. Probably some authenticator apps even hook themselves up so that they open and import it when you tap the link.
It contains all the details an authenticator app needs in order to generate these one-time codes. Even if my phone spontaneously combusts, I can always get some other authenticator on some other device set up with this data.
It contains all the details an authenticator app needs in order to generate these one-time codes. Even if my phone spontaneously combusts, I can always get some other authenticator on some other device set up with this data.
ruffyD
New Member
done
OP
OP
Just a reminder to save your one-time use back up codes in case you get locked out of your account. Many people get new phones and don't remember to transfer their accounts to the 2FA app on their new phone before wiping the old phone.
If you didn't save your one-time use codes or want to generate a new set of them, go here:
You should copy and paste them into a text document and save it somewhere. (Preferably not locally on your phone) One Drive or Google Drive is an option. Personally, I print them out and keep it in a secure place.
Once you get back into your account using a one-time use back code, you should reset the Verification code via app using the Manage button. Once you set it up again, you will get a new set of one time-use backup codes and the old ones will no longer work.
If you didn't save your one-time use codes or want to generate a new set of them, go here:
You should copy and paste them into a text document and save it somewhere. (Preferably not locally on your phone) One Drive or Google Drive is an option. Personally, I print them out and keep it in a secure place.
Once you get back into your account using a one-time use back code, you should reset the Verification code via app using the Manage button. Once you set it up again, you will get a new set of one time-use backup codes and the old ones will no longer work.
nortyjr7557
New Member
Good to go
- Status
Similar threads
