Navigation section

Account security and privacy

Account security, two-step verification, and privacy

Your account protects your posts, conversations, watched content, alerts, and profile. Use Password and security to control passwords, passkeys, two-step verification, backup codes, and trusted devices.

Listen to this guide

A narrated overview of account security, two-step verification, and privacy basics.

Transcript

Your WindowsForum account protects your posts, watched content, alerts, conversations, and profile. Use a unique password, then add an authenticator app, passkey, email verification, or backup codes from Password and security. Store backup codes somewhere private, review trusted devices, and keep your email address current. Never post passwords, recovery codes, verification links, or private messages publicly.

Watch the account security page walkthrough, including passkeys and two-step verification controls.
Annotated account security and two-step verification controls
Two-step verification is enabled on WindowsForum. Active methods include passkeys, app codes, email codes, Authy, and backup codes.

What two-step verification means

Two-step verification adds a second check after your password. If someone learns your password, they still need a second method before they can access your account.

WindowsForum supports several methods. You do not need to use all of them, but you should keep at least one primary method and a backup path.

Authenticator app codes

Use an app such as Authy, Google Authenticator, Microsoft Authenticator, 1Password, Bitwarden, or another TOTP-capable app to generate a short verification code.

Passkeys and security keys

Passkeys can use device biometrics, a hardware security key, or your device account. They are phishing-resistant when supported by your browser and device.

Password and security

Email and backup codes

Email codes can help when you do not have an authenticator app. Backup codes are one-time emergency codes and should be saved somewhere secure.

Recommended setup

  1. Use a unique password that you do not use on any other site.
  2. Add an authenticator app or passkey as the primary two-step method.
  3. Generate backup codes and store them in a password manager or another secure place.
  4. Review trusted devices periodically. Remove trust from shared, public, or lost devices.
  5. Update your email address before you lose access to the old mailbox.

Do

  • Keep backup codes private.
  • Use a password manager when possible.
  • Log out on devices you do not control.
  • Contact staff quickly if your account may be compromised.

Do not

  • Post recovery codes, email verification links, or private messages publicly.
  • Share your account with another person.
  • Disable all two-step methods unless you have a safer replacement ready.
  • Trust a public or work device unless you understand the risk.

Related help

Back
Top