2FA login to AFF

[Daver6]

I just noticed 2FA using an authenticator code is now available. This is fantastic!

I note when logging in, there is an option to remember this computer for 30 days. Would be good to have an option to just remember the computer without expiry too.

My 2 cents

 

[kpc]

Not sure why 2 FA is needed...don't care if someone hacked into my account and posted away under my name....

 

[rainbowgirl]

I can't remember the last time I had to log into AFF. The "remember me" function used to last a lot longer than 30 days. I'm sure it's been more than a month since I had to log in.

 

[Daver6]

Not sure why 2 FA is needed...don't care if someone hacked into my account and posted away under my name....

That's fine. It's an opt in situation, so you don't need to worry. Like sometimes one might not lock their car because they're not fussed if their parking change is stolen. On the other hand, I don't want anyone posting online pretending to be me or communicating privately pretending to be me. I take online security seriously so love the fact that AFF does too.

I can't remember the last time I had to log into AFF. The "remember me" function used to last a lot longer than 30 days. I'm sure it's been more than a month since I had to log in.

I believe that's something different (but happy for the AFF support team to tell me otherwise). My take is every 30 days I'm going to be asked to re-enter the second authorisation code. However, I only just noticed this feature and activated it today.

 

[support]

2FA is a standard function of Xenforo 1.5 (announced June 2015) and has been available as an option since the site migrated in late-2017. It can be especially useful for staff who have extra permissions on their account. Just remember, whether you use 2FA or not, you should always use a different password for every service you use, and this is where a password manager can become useful.

The next version of Xenforo (version 2.1) that was only recently released comes with useful password tools to make sure users are setting appropriate passwords too.

For anyone interested in setting this up for themself, please head here: https://www.australianfrequentflyer.com.au/community/account/two-step

 

[Daver6]

I note when logging in, there is an option to remember this computer for 30 days. Would be good to have an option to just remember the computer without expiry too.

So is this a possibility (ie a Xenforo config setting) or is the 30 day limit baked in?

 

[opusman]

Not sure why 2 FA is needed...don't care if someone hacked into my account and posted away under my name....

Give us yer password then!

 

[kpc]

Give us yer password then!

An average hacker should be able to figure it out very quickly....is it worth the effort for no $$ gain / return?!

 

[support]

So is this a possibility (ie a Xenforo config setting) or is the 30 day limit baked in?

Not that I can see.

2FA: Remember device indefinitely

However this development for a more recent version of Xenforo would speed up the process.

XF 2.1 - Welcome to XenForo 2.1 / Assorted improvements

 

[JohnK]

I can't remember the last time I had to log into AFF. The "remember me" function used to last a lot longer than 30 days. I'm sure it's been more than a month since I had to log in.

I had to log into AFF again yesterday on the laptop in Sydney. Haven't used AFF there for quite a while and it was an unusual I had to login again.

 

[Robert K]

I was so confused. Thought you were talking about 2 flight attendants logging into your account. *facepalm*