2FA: Difference between revisions

Revision as of 23:13, 28 September 2024

Two-Step Verification is a means to secure your account. If your account is compromised, this feature ensures that the attacker will not be able to leave the hub, move, join Skyblock, or harm your island! It requires a security code that only you have access to. Regardless of how secure you believe your account is, using Two-Step Verification provides peace of mind for you and your faction. NOBODY will be able to access your account, your personal vaults, or cause harm to your island. We recommend all users enable this feature.

Downloading an Authenticator

To set up Two-Step Verification, you’ll need an authenticator app. We recommend using Authy as it allows account recovery through a master password.
Authy is a mobile app that enables you to sync your account across multiple devices, provided you have verification enabled.

Downloading Authy

On your mobile device, download the Authy app. You will be prompted to connect your account using a phone number and an email address, followed by entering a verification code.
After, you'll be asked to create a backup password. Ensure this password is strong and secure.
In the app's settings, you MUST set up a master password to fully secure your account. We recommend making this password a long combination of characters, symbols, and numbers to maximize security and reduce the risk of compromise.

In-Game Two-Step Verification

How to Set Up Two-Step Verification

Two-Step Verification can ONLY be done from the hub! First, download Authy, which will provide you with your security code.
We recommend Authy because it allows you to store multiple authentication codes in one location, such as Google Authenticator, Microsoft Authenticator, and Twitch 2-Factor Authentication codes.

Once you’ve downloaded Authy, log into CosmicSky.net and execute the command /2fa. You will be prompted with a message and shown a map.

To view the map, point your head downward.

Open Authy and select "Add Account". Then, look down at the map in-game, which will display a QR Code that is unique to your account and UUID.

Once you have scanned the QR code (or manually entered the Secret Key) into your Two-Step Verification app, enter the code provided by the app into in-game chat using /auth < code provided by the application >

Once complete, you will receive 5 recovery codes. These are emergency backup codes in case you lose access to your Two-Step Verification app.

Store these codes in a secure place and NEVER share them or lose them, as this may result in permanent account lockout!

And you're done!

If your IP address changes, you will be prompted for your Two-Step Verification code. If you need to remove Two-Step Verification, log into your account on Cosmic and run /2fa remove.

Recovery Codes

If you have lost access to your Two-Step Verification device and no longer have your backup codes, follow this guide to attempt recovery.

This process involves searching your Minecraft log files for the backup recovery codes that were sent as a message in chat.

IMPORTANT: If you’ve reset your computer since setting up /2fa or deleted your .minecraft folder, this method will not work. Your best chance is checking the Recycle Bin for your old .minecraft folder.

Windows Recovery

To search through your logs, download these programs: ::* WinRAR or 7-Zip ::* Notepad++

1: Press the Windows key and the R key simultaneously to open the Run command.

2: In the Open box, type %appdata% and select OK.

3: Open the .minecraft folder at the top.

4: Inside the .minecraft folder, locate the logs folder.

5: Select all .log files, except for the latest text document.

6: Right-click the selected files and click Extract files. Confirm by selecting OK.

7: Open the newly extracted logs folder and highlight all documents inside. Right-click and choose Edit with Notepad++.

8: In Notepad++, press Ctrl + F to open the Find menu. Enter a keyword from the 2FA Backup Codes message, such as recovery codes, and click Find All in All Opened Documents.

9: If the text is found, it will be listed in the search results. Double-click the result to navigate to your recovery codes.

macOS Recovery

1: Open Finder and click Go in the top taskbar.

2: Hold the Option key and select Library.

3: Open the Application Support folder.

4: Locate and open the minecraft folder.

5: Inside the minecraft folder, find the logs folder.

6: Select all log files, excluding the latest text document.

7: Right-click the selected files and click Extract files. Confirm by selecting OK.

8: Open the extracted logs folder, highlight all documents, and right-click to open them with TextEdit.

9: In TextEdit, press Command + F to open the Find menu. Search for a keyword from the 2FA Backup Codes message, like recovery codes, and click Find All in All Opened Documents.

10: If the text is found, it will appear in the search results. Double-click the result to navigate to your recovery codes.

If your logs contain no results, you will not be able to recover your codes using this method.

@@ Line 1: / Line 1: @@
-Two-Step Verification is a means to '''secure your account''' so that IF your account is compromised they ''will not be able to leave the hub, move, join any of the planets or harm your faction!'' It requires a security code that only you have. Regardless of how secure you believe your account is, this is peace of mind for you and your faction that '''NOBODY''' will be able to access your account, your PV's or harm your faction! We recommend ALL users use this.
+Two-Step Verification is a means to '''secure your account'''. If your account is compromised, this feature ensures that the attacker ''will not be able to leave the hub, move, join Skyblock, or harm your island!'' It requires a security code that only you have access to. Regardless of how secure you believe your account is, using Two-Step Verification provides peace of mind for you and your faction. '''NOBODY''' will be able to access your account, your personal vaults, or cause harm to your island. We recommend all users enable this feature.
-== '''Downloading an Authenticator''' ==
+=='''Downloading an Authenticator'''==
-When downloading an authenticator for your Two-Step Verification, we recommend the use of [https://authy.com/download/ Authy] to ensure that your account can be recovered via a master password.<br>
+To set up Two-Step Verification, you’ll need an authenticator app. We recommend using [https://authy.com/download/ Authy] as it allows account recovery through a master password.<br> Authy is a mobile app that enables you to sync your account across multiple devices, provided you have verification enabled.
-Authy also allows you to install the chrome extension and desktop application, enabling you to verify your account all on the comfort of your computer! In addition, [https://authy.com/download/ Authy] allows users to have the same account on multiple devices as long as you have verification.
-=== Downloading Authy (Mobile) ===
+=== Downloading Authy ===
-:On your mobile device, download the [https://authy.com/download/ Authy] app. You will be asked to connect your account with a phone number and an email address. You will then be asked to input verification code.<br>
+On your mobile device, download the [https://authy.com/download/ Authy] app. You will be prompted to connect your account using a phone number and an email address, followed by entering a verification code.<br>
-:After, you will be asked to enter a backup password. Make sure this password is secure.<br>
+After, you'll be asked to create a backup password. Ensure this password is strong and secure.<br> In the app's settings, you '''MUST''' set up a master password to fully secure your account. We recommend making this password a long combination of characters, symbols, and numbers to maximize security and reduce the risk of compromise.
-In settings, you '''MUST''' set up a master password to make sure your account is completely secure. We recommend making this password a long combination of characters, symbols, and numbers to provide you with the maximum amount of security, and least likely hood of being compromised.
-== '''In-Game Two-Step Verification''' ==
+=='''In-Game Two-Step Verification'''==
-=== How do I set up Two-Step Verification? ===
+=== How to Set Up Two-Step Verification ===
-'''Two-Step Verification can ONLY be done from the hub!'''
+'''Two-Step Verification can ONLY be done from the hub!''' First, download [https://authy.com/download/ Authy], which will provide you with your security code.<br> We recommend Authy because it allows you to store multiple authentication codes in one location, such as Google Authenticator, Microsoft Authenticator, and Twitch 2-Factor Authentication codes.<br>
-First, you need to download [https://authy.com/download/ Authy]. [https://authy.com/download/ Authy] will provide you with your code.<br>
-The reason we recommend [https://authy.com/download/ Authy] is because it ''allows you to keep multiple authentication codes'' in one location (things like google authenticator codes, Microsoft authentication codes, twitch 2 factor authentication codes) as well, <u>you are able to have the application on your phone as well as on your desktop/laptop etc.</u> provided you use google chrome.<br>
-Once you have downloaded [https://authy.com/download/ Authy], log in to CosmicSky.net and '''execute the command /auth''' and you will be prompted with the message below and a map.<br>
-<br>
-To look at the map, just point your head downwards
-[[File:2fa_instructions.png]]
+Once you’ve downloaded Authy, log into CosmicSky.net and execute the command '''/2fa'''. You will be prompted with a message and shown a map.<br> <br> To view the map, point your head downward.
-<br><br>
-Open [https://authy.com/download/ Authy] and select "'''Add Account'''" and look down at the map in-game. It will be a QR Code that will be '''unique to your account and UUID.'''
-[[File:Map.png|400px]]
+[[File:2faInstructions.png|700px]]
+<br><br> Open Authy and select "'''Add Account'''". Then, look down at the map in-game, which will display a QR Code that is '''unique to your account and UUID'''.
-Once you have scanned the QR code (or entered the Secret Key) into your Two-Step Verification application enter the code the application is provided you, into the in-game chat using '''/auth < code provided by the application >.'''<br>
+[[File:2faMap.png|400px]]
-Once complete you will be provided with ''5 scratch codes''. These are '''emergency back up codes''' if you lose access to your Two-Step Verification application.
-<u>'''Keep them in a safe place and do NOT share or lose them or you will be locked out of your account permanently! '''</u>
+Once you have scanned the QR code (or manually entered the Secret Key) into your Two-Step Verification app, enter the code provided by the app into in-game chat using '''/auth < code provided by the application >'''
-[[File:2faCodes.png|700px]]
+Once complete, you will receive ''5 recovery codes''. These are '''emergency backup codes''' in case you lose access to your Two-Step Verification app.
-'''And complete!'''
+<u>'''Store these codes in a secure place and NEVER share them or lose them, as this may result in permanent account lockout!'''</u>
-If your IP address changes you will be prompted for your two-step verification code! If you need to remove Two-Step Verification simply log into your account on Cosmic and run /2fa remove.
+[[File:2faCodes.png|600px]]
-== '''Recovery Codes''' ==
+'''And you're done!'''
-If you have lost your Two-Step Verification device and do not have access to your backup codes, you can follow this guide to help you have the possibility of recovering them.
+If your IP address changes, you will be prompted for your Two-Step Verification code. If you need to remove Two-Step Verification, log into your account on Cosmic and run '''/2fa remove'''.
+== '''Recovery Codes''' ==
+If you have lost access to your Two-Step Verification device and no longer have your backup codes, follow this guide to attempt recovery.
-:This process will include combing through your Minecraft log files in order to find the backup recover codes that were placed in chat as a message to you.
+This process involves searching your Minecraft log files for the backup recovery codes that were sent as a message in chat.
-::'''<span style="color:red">IMPORTANT:</span> If you've reset your computer since setting up your /2fa OR deleted your .minecraft folder, then this method will not work for you. Your only other option is to go through your Recycle Bin and hope your old .minecraft is there.'''
+::'''<span style="color:red">IMPORTANT:</span> If you’ve reset your computer since setting up /2fa or deleted your .minecraft folder, this method will not work. Your best chance is checking the Recycle Bin for your old .minecraft folder.'''
-=== Windows Recovery ===
+===Windows Recovery===
+To search through your logs, download these programs: ::* WinRAR or 7-Zip ::* Notepad++
-::In order to sift through these logs, you must download these programs:
+'''1:''' Press the '''Windows''' key and the '''R''' key simultaneously to open the '''Run''' command.
-::* WinRAR or 7-Zip
-::* Notepad++
-::'''1:''' Hold your '''Windows key''' and '''R''' key to open the '''Run''' command.
+'''2:''' In the '''Open''' box, type '''%appdata%''' and select '''OK'''.
-::'''2:''' In the box that reads '''Open''', type '''%appdata%''' and then select '''OK'''.
+'''3:''' Open the '''.minecraft''' folder at the top.
-::'''3:''' Open the '''.minecraft''' folder at the very top.
+'''4:''' Inside the '''.minecraft''' folder, locate the '''logs''' folder.
-::'''4:''' Once inside the '''.minecraft''' folder, locate the '''logs''' folder.
+'''5:''' Select all '''.log''' files, except for the '''latest''' text document.
-::'''5:''' Select the '''.log''' files via highlighting all of them, however '''DO NOT''' select the '''latest''' text document.
+'''6:''' Right-click the selected files and click '''Extract files'''. Confirm by selecting '''OK'''.
-::'''6:''' Once all highlighted, '''right click''' and click '''Extract files'''. This will bring up a prompt in which you select the '''OK''' button.
+'''7:''' Open the newly extracted '''logs''' folder and highlight all documents inside. Right-click and choose '''Edit with Notepad++'''.
-::'''7:''' Open the new '''logs''' folder you have created and highlight '''ALL''' documents inside the folder. Once selected, '''right click''' and select ''''Edit with Notepad++'''.
+'''8:''' In Notepad++, press '''Ctrl + F''' to open the '''Find''' menu. Enter a keyword from the 2FA Backup Codes message, such as '''recovery codes''', and click '''Find All in All Opened Documents'''.
-::'''8:''' Once in the '''Notepad++''' window, type '''"Control + F''' to open the '''find''' menu. From here, type a '''keyword''' from the '''2FA Backup Codes''' message like '''scratch codes'''. After that select '''Find All in All Opened Documents'''.
+'''9:''' If the text is found, it will be listed in the search results. Double-click the result to navigate to your recovery codes.
-::'''9:''' If the text has been recovered, you will have found a location as seen in your '''find''' box located at the bottom of the window. '''Double click''' the found text and it will take you to your recovery codes.
+=== macOS Recovery ===
+'''1:''' Open '''Finder''' and click '''Go''' in the top taskbar.
+'''2:''' Hold the '''Option''' key and select '''Library'''.
-=== OSX Recovery ===
+'''3:''' Open the '''Application Support''' folder.
-::'''1:''' Open '''Finder''' and click on '''Go''' on your top of your taskbar.
+'''4:''' Locate and open the '''minecraft''' folder.
-::'''2:''' Hold '''Option''' and select '''Library'''.
+'''5:''' Inside the '''minecraft''' folder, find the '''logs''' folder.
-::'''3:''' Open the '''Application Support''' folder.
+'''6:''' Select all log files, excluding the '''latest''' text document.
-::'''4:''' Locate and open the '''minecraft''' folder.
+'''7:''' Right-click the selected files and click '''Extract files'''. Confirm by selecting '''OK'''.
-::'''5:''' Once inside the '''minecraft''' folder, locate the '''logs''' folder.
+'''8:''' Open the extracted logs folder, highlight all documents, and right-click to open them with '''TextEdit'''.
-::'''6:''' Select the '''log''' files via highlighting all of them, however '''DO NOT''' select the '''latest''' text document.
+'''9:''' In TextEdit, press '''Command + F''' to open the '''Find''' menu. Search for a keyword from the 2FA Backup Codes message, like '''recovery codes''', and click '''Find All in All Opened Documents'''.
-::'''7:''' Once all highlighted, '''right click''' and click '''Extract files'''. This will bring up a prompt in which you select the '''OK''' button.
+'''10:''' If the text is found, it will appear in the search results. Double-click the result to navigate to your recovery codes.
-::'''8:''' Open the new '''logs''' folder you have created and highlight '''ALL''' documents inside the folder. Once selected, '''right click''' and open with ''''TextEdit'''.
-::'''9:''' Once in the '''TextEdit''' window, type '''"Command + F''' to open the '''find''' menu. From here, type a '''keyword''' from the '''2FA Backup Codes''' message like '''scratch codes'''. After that select '''Find All in All Opened Documents'''.
+'''If your logs contain no results, you will not be able to recover your codes using this method.'''
-::'''10:''' If the text has been recovered, you will have found a location as seen in your '''find''' box located at the bottom of the window. '''Double click''' the found text and it will take you to your recovery codes.
-::'''If your logs supply no hits, you can not find your recovery codes via this method.'''