Finally. It's here, friends!
Let us know how you feel! I'm very excited about this change. This is some good stuff, TNT.
Better late than never.
(you need an account to see links)
(you need an account to see links)
Copy Paste:
You can use 2-Factor Authentication (2FA) to add an extra layer of security to your Neopets account. With 2-Factor Authentication enabled, whenever you log in to your Neopets account, you'll be asked to authenticate the login attempt using a secondary personal device.
Enabling 2-Factor Authentication:
In order to use 2-Factor Authentication on Neopets, you must use an authenticator app on an eligible mobile device. If you don't already have an authenticator app on your device, any app that supports Time-based One-Time Password (TOTP) should work, such as Google Authenticator for Android/iOS or Microsoft Authenticator for Android/iOS/Windows devices.
To enable 2FA using your mobile device:
Enter your Neopets password in the prompt at the top of this page, and click 'Enable 2FA'.
You will be presented with a popup with instructions for setting up an authenticator app.
To add your account to your authenticator app, you can either:
Scan the on-screen QR code (if your app supports it).
Manually enter the secret key, provided beneath the QR code.
(You may save this key if you wish to set up your account on multiple devices!)
Depending on the app, you may be asked to follow additional steps to complete configuration.
Once your Neopets account has been configured in your authenticator app, enter the security code that has been generated by your app.
Click Activate.
If your verification is successful, you will now be prompted to generate your emergency backup codes.
Read the information provided before proceeding, and once you are ready, click Generate.
You will be given six 8-digit backup codes. Once you have recorded these, check the box to confirm that you have received them.
Click Enable 2-FA.
You will now have 2FA enabled for your Neopets account!
Logging in with 2-Factor Authentication:
After enabling 2FA for your Neopets account, you will be prompted to verify your authorization after entering your Neopets password upon every login attempt thereafter.
To authorize log-in using your authenticator app:
Enter your username and password at login, and you will be prompted to authorize with 2FA.
Open your authenticator app used to enable 2FA.
Enter the 6-digit security code that has been generated by your app.
If your verification is successful, you will proceed to your Neopets account as normal!
(Note: Time-based security codes will re-generate periodically. If your attempt fails, ensure that you have entered the most recent code.)
To authorize log-in using an emergency backup code:
Enter your username and password at login, and you will be prompted to authorize with 2FA.
Click Use Emergency Backup Code at the bottom of the popup.
Enter one of your 8-digit emergency backup codes.
If your verification is successful, you will be given a notice that 2FA has been disabled on your account.
You may choose to re-enable 2FA at this time, following the normal enabling steps, or you may proceed to your Neopets account.
(Note:: If you Do Not choose to re-enable 2FA, it will remain disabled until you enable it from the preferences page.)
Emergency Backup Codes:
When you are enabling 2FA for your account, you will be given a set of randomly generate one-time use emergency backup codes.
Here is everything you need to know about your emergency backup codes:
If you use one of your backup codes, 2FA will be automatically disabled on your account!
The purpose of these codes is to allow to access your account in the event that you no longer have access to your authenticator app. (new/broken phone, deleted account from app, etc.)
Upon using one of your emergency backup codes, you will be directed to this page to re-enable 2FA after logging in.
It is advised that you do so at this time, otherwise 2FA will be disabled indefinitely.
If you do not have a mobile device on hand to enable 2FA, there are also browser extensions you can use to set up 2FA.
If 2FA has been disabled, you will generate new backup codes upon re-enabling 2FA, and thus your previous codes will be rendered invalid.
If you lose your emergency backup codes, you may generate a new set of codes at any time from the preferences page.
While it is true that you may only ever usefully use 1 backup code at a time, you are provided with 6 codes as an extra security measure.
It is advised that you do not store all 6 codes in the same place, which will decrease the likelihood of you losing all of them at once.
As a security measure, you will not be able to use an emergency backup code to disable 2FA from the preferences page.
If you lose access to both your authenticator app and your emergency backup codes, you will need to contact support to regain access to your account.
Disabling 2-Factor Authentication:
If you decide that you no longer wish to use 2FA on your Neopets account, you may disable the feature at any time.
IMPORTANT! You must disable 2FA in your Neopets preferences prior to removing your Neopets account from your authenticator app.
To disable 2FA:
Enter your Neopets password and your 6-digit authenticator code* in the prompt at the top of this page.
Click 'Disable 2FA'
If your verification is successful, 2FA will now be disabled for your Neopets account!
Once you have disabled 2FA in your Neopets preferences, you may now follow appropriate steps in your authenticator app to remove your Neopets account.
*If there is any reason that you no longer have access to the device/authenticator that was used to enable 2FA on your account, please contact support for further assistance.
Awesome 2FA guide + review by @(you need an account to see links)
(you need an account to see links)