support@defcon.social on Nostr: If you have already enabled 2FA you can ignore this announcement. Hello people (and a ...

If you have already enabled 2FA you can ignore this announcement.

Hello people (and a few bots) of DCS! DEF CON Social will require 2 Factor Authentication (2FA) for all accounts by the end of July 2026 to enhance security and dissuade automated credential stuffing.

To prepare for this requirement you will need a One Time Password (OTP) calculator, sometimes referred to as a “Google Authenticator App” or “Authenticator”.

- Set Up 2FA now: You don’t have to wait for the end of the month, you can set it up on your account now. Settings → Account → Two-factor Auth (https://defcon.social/settings/two_factor_authentication_methods)

Mastodon supports two types of 2FA:
- One Time Passwords are referenced as using the “Authenticator App” which is a OTP calculator. You will scan a QR code or manually enter your time seed, verify it works, and away you go. For iOS I prefer the excellent “OTP Auth” by Roland Moers. (https://apps.apple.com/us/app/otp-auth/id659877384)

- Security Keys: Once you have your OTP app working Mastodon then unlocks a more secure way of protecting your account, the final stage boss, physical Security Keys (SK). Sometimes called WebAuthn tokens, with YubiKeys being the most well known examples.

By the end of the month everyone will need to have an authenticator app set up, after that you can also decide to use a Security Key for maximum security.

Please direct any questions to support (https://defcon.social/@support) if you need help or advice on this transition.