2step with PGP code

I don't know if this could possibly be implemented but i think it would be great for account security. When you log in you have to decrypt a message using your pgp code and enter the decrypted message in a box and log in from there.

 

We have that already?

 

I might. Be wrong idk

 

We already have two factor authentication http://www.sythe.org/twofactor.php

 

As Jack Goff said, we already have a similar form of this aka two-factor authentication. PGP was made for encrypted/secure communication between two people, not so much for logging into a website.

 

quite simple. When you try to log in it gives you a code you need to decrypt. If you cant decypt you cant log in. I realize there is already a 2fa in effect but extra protection is never bad. Or you could give the option between the two methods.

 

I know how PGP works, I've used it. There's a public and a private key, person you're communicating with has one and you have one. You must have the key in order to read/send a message.

It's not all that complicated, but it would likely bother some people; furthermore, it's overkill and I doubt it can even be implemented on a website like this. I've always known PGP to be used for communication between individuals, not logging into a website. Only people that are using PGP are people that really care about their privacy likely because what they are communicating is sensitive whether it be leaks/illegal transactions/whatever.

2FA is plenty effective for Sythe. If you do not have the code, you're not logging into Sythe. Take it from someone that knows first hand, I lost my code for 2FA and it has made it tremendously difficult to get my account back (admins/Sythe now have to confirm my identity and that's really only possible because some of them know what I look like.) 2FA is plenty security for logging into Sythe.

 

Unnecesary, 2fa is secure enough.