Now available: Now powered multifactor - easy security

[Teddy]

I am glad to say we've made significant progress in two factor since we first introduced two factor with keys earlier this year. This week we're taking that next step with an Android app to ease the process 110% without complicated pins and codes. Just a tap.

We have a preview of how the interaction works. Note: my IP is removed but for your end you will actually see the IP address attempting to access the account.



No more codes. No more hassle. No more account breaches. Tap and done.

Getting Now Multi-Factor
You can now opt-in to the beta program:

https://play.google.com/apps/testing/com.argonathrpg.multifactor

Following this, you'll have access to the store page: (do note: it might take a few moments to become available))

https://play.google.com/store/apps/details?id=com.argonathrpg.multifactor

You will then need to get started on the panel with scanning a token:

https://panel.argonathrpg.nl/now

Is it fast?

As soon as I typed my password in, by the time I looked down at my phone the notification was there. We do this by prefetching the data needed when you're still connecting to Argonath. As soon as I tap approve and look up, I'm in looking at the motd screen. It's seamless and flawless.

note: testing was done over WiFi and was not tested on cellular data... then again why would you need it?

Notification isn't working?

We generate a key used in Google Auth much like the stand two factor method, you won't need Google Auth however since the app itself has this stored and can generate the token. Simply click 'Help' on the dialog and select 'Use key'.

Will staff get rights using this method?

Yes, the staff requirements to have two factor enabled is fulfilled with this method.

What versions of Android?
4.4.2 to 6.0.1. Not compatible with those before 4.4.2 or with the Android N preview.

What if I click reject?

If you click reject the user will be booted from the server without being permitted in. If this wasn't you, please contact us immediately and change your password ASAP.

[AK47]

What about us iOS-users?

[Teddy]

What about us iOS-users?

There is no estimate on a version for iOS users due to some 'licensing' term snags (hence the topic seeking legal experience). My recommendation of course would be to join the 85%+ of the world and get a real phone.

[Teddy]

Correction: The app will be compatible with Android versions 4.1 to 6.0.1.

The app will enter public beta sometime tomorrow, you can opt-in to the beta program and try it out a bit early. Do note, there is quite a bit of last minute stability problems still being worked out on the Now network. For the most part things are fully operational but the occasional snag still arises. Those problems should be worked out by the end of the week and more people using it could help me better track the problems. Don't worry, if it crashes when you're trying to login wait about 5 minutes and it'll reboot itself.

[TiMoN]

Can I use shit like Andyroid or Bluestacks? Sometimes I cba to walk to my desk and get my phone.

[Teddy]

Can I use shit like Andyroid or Bluestacks? Sometimes I cba to walk to my desk and get my phone.

It might be possible, earlier testing of the app was done with Genymotion before it was tested on one of my spare devices.

[Teddy]

Note: I just published this change on the dev console, Google says can take up to an hour to become available.

You can now opt-in to the beta program:

https://play.google.com/apps/testing/com.argonathrpg.multifactor

Following this, you'll have access to the store page: (do note: it might take a few moments to become available))

https://play.google.com/store/apps/details?id=com.argonathrpg.multifactor

You will then need to get started on the panel with scanning a token:

https://panel.argonathrpg.nl/now

[Teddy]

Additional questions asked today

Is it easy to setup?

Yes, you click a button on the panel and then using the app you scan a barcode. From then on you simply need to tap approve to requests you want to permit to login to your account.

How stable is it?

I've been using it to login for the past week and I've only had an issue once but I simply used the backup code method. It's fairly stable with just a few kinks to be ironed out. Your usage will help with that process though.

How does this prevent account breaches?

This reduces the chance of account breaches by adding an extra layer of security. As long as you have this enabled, only requests to your account that you approve are permitted. This means even if someone manages to guess your password or somehow obtains it, without your phone they still won't be able to access your account.

What if I don't have an internet connection?

Then why would you be trying to login to SA-MP? In any case you can still use the app's backup method of using the one time code.

Is there ads?

No.

Is it free?

Of course.

Why do you need camera permission?

So you can scan the barcode. That uses the camera. If you have Android 6, you can revoke the permission after the initial scan if you are paranoid.

What analytic networks are reported to?

Google.

Do I need to have an active cellphone plan?

No, you just need a WiFi connection if you want to get a notification to approve. Otherwise, you'd just be able to use the backup code.

[Julio.]

Looks interesting, but alas, I don't have a device running Android!

[Devin]

Opening the NOW app just gives me a white screen on 4.4.4 

[Teddy]

Opening the NOW app just gives me a white screen on 4.4.4 

The Now app or the new Multifactor, as I recall you have alpha access to Now and had the same problem with that one. In any case, try reinstalling it.

[Teddy]

A note to those from RS5.2 beta:

Make sure you are installing the NEW multifactor app; the one used in beta is far more unstable and problematic. Ensure you are installing the 'com.argonathrpg.multifactor' version.

and a side note: some people with newer Samsung devices are experiencing a problem scanning the barcode. If this occurs, make sure you have this installed. You may not need it however.

[eymas]

Took me two minutes to scan the code after trying three different displays 

[Janar]

I have been using Google Authenticator so far during the log-in process. Will this method remain next to this or do I have to switch to the new one at some point?

[Teddy]

I have been using Google Authenticator so far during the log-in process. Will this method remain next to this or do I have to switch to the new one at some point?

We will always keep both methods available, the choice to switch to this one is entirely yours.