Skip to content
Buy Gems
Play
community
All updates
FeatureAll modes

Two-factor authentication now covers joining the server

Two-factor authentication can now protect your in-game account too. With the in-game check on, joining from an address you have not used before asks for your authenticator code before you can play. Staff accounts must have both the website and in-game checks on.

2 min read1 view
0

Key changes

  • The in-game check is optional for players and builds on website two-factor authentication
  • Joining from a new IP address asks for a 6-digit code from your authenticator app, or a recovery code
  • Until the code is entered you cannot move, chat, use items or run commands
  • Staff must have two-factor authentication on for both the website and in-game, or they cannot join

Turning it on

  • Turn on website two-factor authentication first, from Account, Settings, Security
  • Then switch on "Also require my code in-game when I join from a new IP address" on the same page, or run /2fa enable <code> in game
  • The next time you join from an address you have not used before, type the code in chat

Joining from a new address

  • Type the 6-digit code from your authenticator app in chat, or use /2fa <code>
  • A recovery code works as well, and is used up once entered
  • You have two minutes to enter the code before the connection is closed
  • Five wrong codes lock code entry for 15 minutes, on the website and in game
  • After a correct code the address is trusted, so you are not asked again from there

Trusted addresses

  • /2fa ips lists the addresses that are trusted, and the website shows them under Security
  • /2fa forget <address|all> or the website removes an address, so the next join from it asks for a code again
  • Addresses that have not been used for 90 days are forgotten on their own

Staff

  • Staff accounts cannot join without website two-factor authentication
  • Staff who have it on the website but not in game are asked for a code on their next join, which turns the in-game check on
  • Staff cannot turn either check off

Lost your authenticator

If you lose both your authenticator and your recovery codes, open a support ticket. Staff will verify your identity and reset two-factor authentication, which also forgets your trusted addresses.

Tags#account#security#website