Changes to Two Factor Authentication, and the future of 2FA

2FA is being disabled for all enrolled members. This is due to a very high % credential loss rate and recoveries that need our intervention.
All credentials will be deleted. If you have any authenticator entries for LCPDFR.com, you should delete them as they no longer apply.

We will change how 2FA works, by introducing recovery codes that you should save or print.

After this is done, 2FA will be an optional feature for all members again (although requiring re-enrolment with new codes), with a new recovery policy going forward:

Two factor authentication allows members who feel they are in a higher risk category for security incidents to gain additional security on their account. We only recommend enabling 2FA if you fall into this group and understand you can lose your account if you lose your authenticator/security key and recovery codes.

If you lose your authenticator or security key, you can optionally use one of your recovery codes to verify you are who you say you are. Each recovery code is valid only once. Using a recovery code to login will disable 2FA on your account.
 

If you lose both your authenticator/security key and recovery codes, we don't have a way of validating you are who you say you are. We have data protection obligations to make sure we don't hand your account to an unauthorized user. You will be permanently locked out of your account. The only exception here will be for groups that we hold enough information to recover accounts without 2FA. For Insiders, send us a copy of your payment confirmation and a message to management at site domain. For staff or testers, contact us using internal means.

We will post here when the new system is in place.

Cyan.