Admin Advisory on Account Security

[Westwind]

Greetings!

Yesterday, three member accounts were hit by a hacking attempt. The attempt failed, as the forum temporarily locked the accounts to prevent further attempts.  The attacker tried one account, then a second, and then the third.

The source of the attack is from the USA, and the source has now been blocked. Of course, the attacker could change IP's and repeat the attack. Two of the three accounts have been targeted previously, leading to the possibility of a repeat attacker.

I want all of our members to know that additional account security is available to you. You can enable 2-factor authentication for your account if you would like, using Google Authenticator.

Go to:

https://www.westpacific.org/forums/index.php?/settings/account-security/

Once you've selected 'Enable' you will get this screen:

 

Once you have Google Authenticator installed on your phone, you can scan the QR code and enter the code it gives you in the 'Verify Code' box.

Your security setting will then show that it's enabled, and you will need to enter your Authenticator code as well as your password each time you login:

And you can select 'Disable this method' to discontinue use of Authenticator.

 

- Westwind, TWP Administration