CHANGE THE CS SECURITY SYSTEM

[Rainyli]

having a 2FA type of security would be super helpful in protecting all of us, and is really smart.

I second this! I already use 2FA for a few other websites. It's pretty easy to set up, especially if you're a tech nerd like so many of the users on here, and it makes it near-impossible for someone to hack you even if they figure out your password.

[COOLDOGOOO]

having a 2FA type of security would be super helpful in protecting all of us, and is really smart.

I second this! I already use 2FA for a few other websites. It's pretty easy to set up, especially if you're a tech nerd like so many of the users on here, and it makes it near-impossible for someone to hack you even if they figure out your password.

whats a 2FA system?

[Rainyli]

whats a 2FA system?

Great question! :)
2FA stands for 2-factor authentication.
The way most 2FA systems work is you install an app on your phone that generates a new code every few minutes, and you have to enter that code along with your password when logging into something. If someone doesn't have access to your phone, they generally can't get into your account.

[The Shattered one]

What about when we trade we have to put in are user and password before trading anything? I know someone said a pin would be better maybe the pin idea should be implemented.

[Rainyli]

Support, but if someone doesn't have access to their email anymore that could be tricky. You know how some sites have security questions? Maybe that's something that could be implemented as well.

I respectfully disagree. I know a cybersecurity major IRL who says security questions are a terrible idea. Especially because a lot of them are random "icebreaker" questions that you might post on Facebook, like the name of your first pet, or your maternal grandmother's birthday. It's just too easy for someone to get their hands on that kind of information, and in some cases, the answers can be easier to guess than regular old passwords.

[Darni]

What about when we trade we have to put in are user and password before trading anything? I know someone said a pin would be better maybe the pin idea should be implemented.

Yes the Enter Pin When Accepting Trade idea was mine. I got the idea from Neopets, but I said 2FA would still be good. The pin would only be for accepting trades NOT editting and suggestion or cancelling. This would be optional for people who don't want to do 2FA or want something WITHIN THE SITE rather than having to open an app on the phone or in a new tab. I don't think we need one or the other I think both would be good and I think it should all be optional. I think having one thing to help is cool, but having multiple ways to secure yourself is always better than just one single measure

[beemo]

Support, but if someone doesn't have access to their email anymore that could be tricky. You know how some sites have security questions? Maybe that's something that could be implemented as well.

I respectfully disagree. I know a cybersecurity major IRL who says security questions are a terrible idea. Especially because a lot of them are random "icebreaker" questions that you might post on Facebook, like the name of your first pet, or your maternal grandmother's birthday. It's just too easy for someone to get their hands on that kind of information, and in some cases, the answers can be easier to guess than regular old passwords.

I think that's completely valid when it comes to social media or actual government websites that have valuable information. I think with an adoptable pet website like Chicken Smoothie, where you're already not allowed to post anything that reveals things about you irl, it's not a bad idea for a little extra security.

[SloppyJane]

Support all the way!

[W0LF]

This reminds me...
My email has changed since I joined.

How to change to my current email?

The new password you entered is the same as your current password.

Yes, I want the same password.
I was only trying to update the address.

Sheesh. Difficult enough already.

only issue I see is if you no longer have access to the original email address, which can be one of the legitimate reasons to need to change emails. thankfully I managed to get into my OG email when I checked my credentials after *waves hand * all that happened and realized my account was like 3 emails out of date. since i made my account back in 08 and never realized it never got updated. x_x

(obviously everything's up to date now and I have a new password too but yeah.)

Okay, so I'm not the only one that sees a potential issue here

[Lacuna]

This reminds me...
My email has changed since I joined.

How to change to my current email?

The new password you entered is the same as your current password.

Yes, I want the same password.
I was only trying to update the address.

Sheesh. Difficult enough already.

You only need to put your password in the bottom box if you are just changing your email. Do not fill in "new password" if you are not changing your password.