Genealogy Specialists: Account Two-Step verification

Discussion in 'Finding Your Way & Rules' started by oman, Apr 3, 2016.

  1. oman

    oman Administrator Staff Member

    Offline
    Messages:
    44
    Likes Received:
    1,504
    Location:
    Sydney, Australia
    Hi All,

    A question came up in another thread about what the Two-step verification feature is.

    This feature is recommended, but optional.

    Please read the contents of this thread before deciding on whether to enable it.

    --

    Two-step verification increases the security of your account by requiring you to provide an additional code to complete the login process. If your password is ever compromised, this verification will help prevent unauthorized access to your account.

    The idea is that if someone ever gains access to your password and tries to log in, an additional layer of security exists to fully log in - in this case a code sent to your phone through an app, OR an additional code sent through to your email.

    How it works - you enable it if you choose to. This can be configured from the following area in your account settings - http://www.genealogy-specialists.com/account/two-step :

    Screenshot at Apr 03 16-05-58.png

    (click to expand the image)

    You set up your preferred two-step verification method.

    The two options available are:
    • Verification code via app - this will use an app on your phone (such as Google Authenticator or Authy) to generate a 6 digit code. This code changes every 30 seconds.
    • Email confirmation - this will send a unique, one-time-use code to the email address associated with your account. This method is not preferred over the app-based verification because if an attacker has access to your account, they may also have access to your email. However, it's certainly better than nothing.

    Once you log in, you need to provide a code sent to either one of the above methods.

    You can trust the specific device you are on (once you log in) for 30 days so it doesn't ask for the code for 30 days.

    There are also back up codes you can manage in the event you lose access to the second step.

    --

    Let us know if you have any questions about this. :)
     
    Bonzo Dog, Joanne, Ma-dotcom and 4 others like this.
  2. oman

    oman Administrator Staff Member

    Offline
    Messages:
    44
    Likes Received:
    1,504
    Location:
    Sydney, Australia
    Bonzo Dog, Joanne, Ma-dotcom and 2 others like this.
  3. Philippa

    Philippa Always a lady.

    Offline
    Messages:
    763
    Likes Received:
    11,579
    Location:
    Canberra, Australia
    Has this been in place since day one, Oman? I don't remember anything like it, but - short term memory you know (maybe not!!) :confused:

    How do I know whether I've two-stepped or not? o_O
     
    Joanne and Ma-dotcom like this.
  4. oman

    oman Administrator Staff Member

    Offline
    Messages:
    44
    Likes Received:
    1,504
    Location:
    Sydney, Australia
    It's been in a while but not from the start - probably late 2015. I decided (with @Daft Bat agreeing) that we would not force it on everyone as it could cause confusion initially - as we had to switch it to not required immediately after upgrade otherwise we would have had everyone wondering what this thing was.

    So currently you wouldn't have it on. No one did prior to my post. http://www.genealogy-specialists.com/account/two-step Is the area within your account settings where you enable it.

    We are at a stage now where we can highly reccommend it. :)
     
    Ma-dotcom and Daft Bat like this.
  5. Ma-dotcom

    Ma-dotcom A Bonza Little Digger!

    Offline
    Messages:
    6,689
    Likes Received:
    17,328
    Location:
    South Australia
    Rather like my original password, shall have to ponder hard before changing it.
     
  6. oman

    oman Administrator Staff Member

    Offline
    Messages:
    44
    Likes Received:
    1,504
    Location:
    Sydney, Australia
    All good, entirely up to you. Two-step adds an additional layer of security if you choose to add it.
     
  7. Philippa

    Philippa Always a lady.

    Offline
    Messages:
    763
    Likes Received:
    11,579
    Location:
    Canberra, Australia
    OK, I've tried it and it's tricky. I went to the two step verification and entered my email address as required. Then (stupidly, I found out) I clicked "enable". I received a message saying that my one-off verification code was being emailed to me and I had to enter that in the enabled window. OK. Off I went, copied code, came back - code invalid - the process started all over again. Oh, did I mention the verification code is valid for 15 minutes, but.....

    Each time you go there you get an email with a different verification code, it seems.

    I have now had 3 verification codes which I've not been able to use because (a) twice I clicked enable before I had a code and (b) I went to bed before the 3rd arrived so this morning it was no longer valid.

    So - word to the wise. When you go to the two-step verification "space" and enter your email address for access, DO NOT CLICK ENABLE. Instead, go back to your email, get the code from the email which has been sent, come back AND THEN click "enable" - post the code and (hopefully) all should be apples.

    I've given up. It's in the too hard basket for now but maybe when everything in my life has settled down to a vague roar instead of its current cyclonic status I'll try again. Maybe.

    If I've done something out of whack and created chaos from what I thought would be a simple process, can someone please advise?

    Thank you :oops:
     
    Sis likes this.
  8. oman

    oman Administrator Staff Member

    Offline
    Messages:
    44
    Likes Received:
    1,504
    Location:
    Sydney, Australia
    It wasn't that cumbersome for me when I tested it. Would you like me to turn it off for you if you don't feel entirely comfortable using it?
     
    Daft Bat likes this.
  9. Philippa

    Philippa Always a lady.

    Offline
    Messages:
    763
    Likes Received:
    11,579
    Location:
    Canberra, Australia
    Thanks, Oman. I'm not sure if you will have to turn it off or not - seems to me I never actually managed to set it up, but I could be wrong.

    I think though, that just in case I have - yes please. Turn it off for me and if and when I find a few grey cells spare (and a drop or 2 of patience) I'll try again with a clean slate.

    Thank you!! :)
     
    Daft Bat likes this.
  10. oman

    oman Administrator Staff Member

    Offline
    Messages:
    44
    Likes Received:
    1,504
    Location:
    Sydney, Australia
    It has been turned off for you @Philippa

    Often when things are new, they can seem a bit bombarding - not our aim but can be unavoidable sometimes - so it is completely understandable that you might have been having some difficulties.

    Don't stress - remember, we haven't made it compulsory so it's not as if you have to worry. :)
     
    Philippa likes this.

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice