Jul 4
Security
Two-factor authentication for member accounts #two-factor-authentication
You can now protect your Aero Reg account with two-factor authentication (2FA). Turn it on from Account -> Security; once enabled, signing in asks for a one-time code from your authenticator app in addition to your password.
added
- Opt-in authenticator-app 2FA (TOTP) that works with 1Password, Authy, Google Authenticator and any standard authenticator. Scan a QR code or type the setup key by hand.
- Ten single-use recovery codes, shown once during setup, for signing in if you lose your authenticator. You can regenerate them at any time.
- A sign-in step that asks for your code after your password whenever 2FA is switched on.
changed
- The Account -> Security tab now reflects your real two-factor state, replacing the earlier “coming soon” placeholder.
security
- Available on every plan - account security is never gated behind a paid tier.
- Your 2FA secret is encrypted at rest, and recovery codes are stored only as one-way hashes with each code usable once.
- Turning 2FA off requires both your current password and a valid code.