Brutkey

Fedi.Tips
@FediTips@social.growyourown.services

If you want to add more security to your Mastodon account, you can set up a system called "two factor authentication" (also known as 2FA). This prevents anyone else logging into your account even if they find out your email and password.

2FA works using a special app on your phone which gives you a short code number to type in when you log in.

I've done a non-technical guide all about 2FA and how to use it, including answers to many questions:

➡ https://fedi.tips/using-two-factor-authentication-2fa-on-mastodon

#FediTips #Mastodon


Draken BlackKnight
@draken@masto.nyc

@FediTips@social.growyourown.services
Many instances also let you set up FIDO2 hardware keys like Yubikeys.

Fedi.Tips
@FediTips@social.growyourown.services

@draken@masto.nyc

Yup, the key option appears in the "two factor auth" section of Preferences after you've set up 2FA
👍👍

William B Peckham
@wbpeckham@techhub.social

@draken@masto.nyc @FediTips@social.growyourown.services I was about to ask if that's the only kind of two-factor authentication that mashed it on supports because that's only one of about six kinds. Any of them are better than no two-factor authentication and choices are good.

Fedi.Tips
@FediTips@social.growyourown.services

@wbpeckham@techhub.social @draken@masto.nyc

The key option appears in Mastodon's 2FA preferences section after you've set up the 2FA.

Fedi.Tips
@FediTips@social.growyourown.services

@wbpeckham@techhub.social @draken@masto.nyc

The key option appears in Mastodon's 2FA preferences section after you've set up the 2FA.

William B Peckham
@wbpeckham@techhub.social

@FediTips@social.growyourown.services @draken@masto.nyc That seems... Weird? That the method for two-factor authentication only shows up after you've already set up two-factor authentication? I suppose since the most common method of two-factor authentication is likely to be the cell phone trick that makes some kind of sense. What about people that like security so much that they don't own a cell phone because cell phones are by their very nature insecure?

William B Peckham
@wbpeckham@techhub.social

@FediTips@social.growyourown.services @draken@masto.nyc That seems... Weird? That the method for two-factor authentication only shows up after you've already set up two-factor authentication? I suppose since the most common method of two-factor authentication is likely to be the cell phone trick that makes some kind of sense. What about people that like security so much that they don't own a cell phone because cell phones are by their very nature insecure?

Fedi.Tips
@FediTips@social.growyourown.services

@wbpeckham@techhub.social @draken@masto.nyc

You don't need to use a phone 2FA, it can be an authenticator on any platform including a computer. (I just mentioned a phone app as this is by far the most common option.)

It just needs some kind of 2FA set up before it shows the key option.

Fedi.Tips
@FediTips@social.growyourown.services

@wbpeckham@techhub.social @draken@masto.nyc

You don't need to use a phone 2FA, it can be an authenticator on any platform including a computer. (I just mentioned a phone app as this is by far the most common option.)

It just needs some kind of 2FA set up before it shows the key option.