this post was submitted on 10 Jul 2023
23 points (100.0% liked)
Meta
707 readers
1 users here now
Discussion about the aussie.zone instance itself
founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
I encourage everyone, but especially mods to enable 2FA on their account. I'll do up a post tonight with screenshots on exactly how to do this, I realise the lemmy process isn't as smooth as it could be. Ideally it would present a QR code to scan with with your phone as most other sites do.
Some points from the admin of ttrpg.network in our Discord chat:
This thread explains the very serious risk of Lemmy's current 2FA implementation.
yes, the initial setup is not intuitive at all. Once setup it functions normally.
Thanks. I'm going to wait for your guide. What do you advise we do with bot accounts?
I've thrown this together.
Thanks. This worked. I got a little confused with points 3, 4 and 5 but now that I've re-read your instructions I see that they are clear and I have no suggestions for improving them at this time.
Hey, so i followed the guide. I think i hit all the steps, but when i try to log in on the browser to test whether its worked. The 2fa box does come up. But when i enter the code and hit login theres no progression on from that screen. Not sure where i've gone wrong? Using Aegis btw.
Hmm you may need to disable 2FA again. I'm not sure why it wouldn't work, perhaps Aegis hasn't imported it correctly?
Okay cool, it just worked. No idea what difference waiting overnight made though.
In the short term, use a 60 character password and never use that account interactively. ie only use it with your scripts/bot. And obviously keep the password securely stored.