Today I made some important changes to the log in system in order to enhance security.
Many may be happy to know that now WLPC's log in system supports TOTP (FINALLY).
For those who don't know what TOTP is, TOTP stands for Time-based One-Time Password. It is a type of two-factor authentication (2FA) method used to enhance the security of online accounts by generating temporary, one-time passwords based on the current time.
Usually you use either a third party authentication app like Google Authenticator or Authy (spit). Many password managers also handle TOTP like the Mac's password app/manager.
I deprecated the code-by-email 2FA due to the extreme email blocks that stand in our mail servers way and the low deliverability of such verification codes.
Codes are still used to verify email addresses during registration, but now not used for 2FA.
Those who have code-by-email set in their account, for now, it still works. But at some point you'll be prompted to switch to either personal security questions or TOTP.
Next I will implement support for Passkeys to allow for passwordless log in.
But for now TOTP is the big news.
To switch your account to TOTP 2FA, go to the 'My Account' page and click 'Update' next to security setting.
You can also follow this link:
https://storiesonline.net/sol-secure/user/my_account.php?cmd=secset