Two Factor Authentication now available

Two Factor Authentication--

There is a tutorial here: http://www.sythe.org/internet/1654006-sythe-two-factor-authentication-tutorial.html

For TLDR:

How to get started:

To set up your two factor authentication for your sythe.org account go to: http://www.sythe.org/account/two-step

You will need a Google Authenticator capable app. There are plenty of these available free on most phones. On IPhone I use the DUO security app, which seems to work well.

When you add two factor you are given a QR code which the phone app will scan off the screen. Once successfully scanned you need to generate your first login code and enter it at the next screen to confirm you want to add two-factor.

After this the system will give you a backup code. Make sure you write down your backup code on a piece of paper and keep it in your wallet. You will need this to recover your account should you lose your phone. Please do not keep your backup code on your computer. IF YOU LOSE THIS CODE AND YOU ARE NOT A SVU - IT WILL BE NEARLY IMPOSSIBLE TO GET YOUR ACCOUNT BACK.

Once two factor is enabled on your account you will be required to generate and enter a code each time you login to your sythe account.

Please leave any bug reports / issues in this thread.

 

Thanks alot Sythe, seems to be working for me Waited for it so long ;D

 

[S]

Nice addition. I'm sure all market traders and trusted users will be happy to have this.

 

[szskateman22]

Can you explain a little bit as to how this works? Like does this make Sythe more secure, does it allow access from my phone? I've already set it up and it's working, but I'm not sure what that means.

 

Can you explain a little bit as to how this works? Like does this make Sythe more secure, does it allow access from my phone? I've already set it up and it's working, but I'm not sure what that means.

If you set it up correctly, when you log in you will have to enter your password and also a 'passcode' which is on the phone app (e.g. duo mobile) that you've used to set it up with. It's an extra layer of protection if you're hacked.

 

[I_DONT_BOT]

Nice addition, thanks sythe!

 

[Cas]

I'd like to remind everybody who is new to this addition and is installing it to put your smartphone on the correct time by either automatic synch or synching it manually.
The app won't work if the time is incorrect, as every code it generates is only valid for 30 seconds.
Thanks to Sythe and Zuzel we know that's important

OT: Very nice addition Sythe, thanks a bunch again

Cheers!

 

[Time To Buy]

Great addition, I'll add it to my account as soon as I'm at a computer. Is the reasoning for not keeping our backup code on our computers for security alone?

 

Great addition, I'll add it to my account as soon as I'm at a computer. Is the reasoning for not keeping our backup code on our computers for security alone?

Yes. If you lose your sythe account via a virus or trojan then you don't want it having access to a copy of your backup code.

 

[Cas]

Yes. If you lose your sythe account via a virus or trojan then you don't want it having access to a copy of your backup code.

Not sure if this belongs here, but I'll just ask here.
Why is there no need for a verification code when switching 2-FA off on your account?
Also I guess when this is out of bèta you won't be switching it off on people's accounts via email?

Cheers!

 

Not sure if this belongs here, but I'll just ask here.
Why is there no need for a verification code when switching 2-FA off on your account?
Also I guess when this is out of bèta you won't be switching it off on people's accounts via email?

Cheers!

I won't be switching it off via email once its out of beta.

And if you can get into your account to switch it off then you've already two factored when you logged in.

 

[Cas]

I won't be switching it off via email once its out of beta.

And if you can get into your account to switch it off then you've already two factored when you logged in.

Hm.. True, but accidentally leaving your account logged in somewhere would leave your 2FA vulnerable to be switched off easily.
I think it would be safer, that's just my 2 cents. Your site, your call

 

[Sypherz]

Really nice to see this released! Very impressed by the new security updates.

 

Hm.. True, but accidentally leaving your account logged in somewhere would leave your 2FA vulnerable to be switched off easily.
I think it would be safer, that's just my 2 cents. Your site, your call

I appreciate that, but on the other hand if you have a machine logged in already and you lose your phone and your backup key, it would be nice to be able to hop on and just remove two factor. But if people really want a guard against it being removed they can let me know and I'll add it later.

 

Just one word: Awesomeness

 

Solid addition. Nice work.

 

Bueno

 

Definitely what Sythe needs to make it more attractive than other market sites.

Can you explain a little bit as to how this works? Like does this make Sythe more secure, does it allow access from my phone? I've already set it up and it's working, but I'm not sure what that means.

Basically, unless someone has your phone and access to the app you choose to use, they wont be able to access your Sythe account, even with your password and recovery email.

 

[Dave]

Great addition Sythe

 

[Delta Squad]

what if you dont own a cellphone? =\