2factor authentication • page 1/2 • Lichess Feedback • lichess.org

hi lichess i have been getting dms for 3 years to turn 2-factor authentication on please stop thanks i will hold out until the end of time i refuse to turn it on nothing can change my mind

nadjarostowa

#2

Look - I don't want to persuade you into using 2FA if you don't want to. And taking risks is up to you, even if nothing is to be gained.

But if someone else wonders why they should enable it, consider this:

You put a lot of effort into your chess career, you got a title, you have a twitch account, and your real name is easily accessible. You certainly have annoyed some people in the past, either over the board, or online - maybe in chat on your stream. Maybe you censored some idiot. Maybe they don't like your haircut. Maybe there's no good reason at all to be mad at you, and they just seek a challenge.

If that guy ever gets access to your account, they can access all your messages and work with that, or play a couple of games when you sleep. Good luck explaining that it wasn't you who got banned for cheating that night.

Sure, you're not that high profile right now, but you put yourself at a considerable higher risk for a very minor inconvenience, and you have much more to lose than some other anonymous guy. And that damage may be very difficult to undo.

Also note that 2FA helps to protect against risks that are out of your control, not only against weak passwords that you leak yourself.

Look - I don't want to persuade you into using 2FA if you don't want to. And taking risks is up to you, even if nothing is to be gained. But if someone else wonders why they should enable it, consider this: You put a lot of effort into your chess career, you got a title, you have a twitch account, and your real name is easily accessible. You certainly have annoyed some people in the past, either over the board, or online - maybe in chat on your stream. Maybe you censored some idiot. Maybe they don't like your haircut. Maybe there's no good reason at all to be mad at you, and they just seek a challenge. If that guy ever gets access to your account, they can access all your messages and work with that, or play a couple of games when you sleep. Good luck explaining that it wasn't you who got banned for cheating that night. Sure, you're not that high profile right now, but you put yourself at a considerable higher risk for a very minor inconvenience, and you have much more to lose than some other anonymous guy. And that damage may be very difficult to undo. Also note that 2FA helps to protect against risks that are out of your control, not only against weak passwords that you leak yourself.

Deadban

#3

Well I don't think they will stop sending you messages.

I REFUSE !

i have no enemies

Especially those people who believe that everyone likes them and cannot imagine having enemies should act with particular caution.

nadjarostowa

#7

@Xellerex said in #5:

i have no enemies

Probably wrong, but this is not a requirement at all.

To be honest, some people might interpret this thread already as a challenge.

But it would be interesting why you refuse to use it. It's a common thing to do on websites that offer more value, and setting it up takes two minutes or so. And how often do you really need to log in? For me, it's very rare - but of course, it is different if you use public computers or prepaid mobile phones in toilet booths, lol. Although I'd say that if you use public computers frequently, it would be especially a good idea to use 2FA.

@Xellerex said in #5: > i have no enemies Probably wrong, but this is not a requirement at all. To be honest, some people might interpret this thread already as a challenge. But it would be interesting why you refuse to use it. It's a common thing to do on websites that offer more value, and setting it up takes two minutes or so. And how often do you really need to log in? For me, it's very rare - but of course, it is different if you use public computers or prepaid mobile phones in toilet booths, lol. Although I'd say that if you use public computers frequently, it would be especially a good idea to use 2FA.

NM Xellerex

#8

its just mainly cuz if im trying to play a quick game or 2 not tryna have to 2fa to log in

NM ThunderClap

#9

I also keep getting this but don't know what it is ... Well sorta understand it's a security measure but not sure how to do this as well . I don't teach anymore but never have online BTW but could but don't thank you

Deadban

#10

@Xellerex said in #8:

its just mainly cuz if im trying to play a quick game or 2 not tryna have to 2fa to log in

You don't need to log in everytime, you can choose to stay connected to your browser or app so when you close them you are not automatically logged out.
You just need to be wary of who has your device. The idea is that if someone steals your phone or pc your lichess account is the last of your problems.

Besides, let's say someone has your password. You enter your account, go to your security settings and remove all the sessions you don't recognize. When the other person enters your password they will be prompted to enter the 2fa code, which they can't have unless they have your device.

@Xellerex said in #8: > its just mainly cuz if im trying to play a quick game or 2 not tryna have to 2fa to log in You don't need to log in everytime, you can choose to stay connected to your browser or app so when you close them you are not automatically logged out. You just need to be wary of who has your device. The idea is that if someone steals your phone or pc your lichess account is the last of your problems. Besides, let's say someone has your password. You enter your account, go to your security settings and remove all the sessions you don't recognize. When the other person enters your password they will be prompted to enter the 2fa code, which they can't have unless they have your device.