Secure Your World: Introducing Two-Factor Authentication (2FA)!
Hey Woozens!
We know how much your Unitz, outfits, and friendships mean to you. We are constantly looking for ways to improve the experience in Woozworld, and a big part of that is giving you better tools to manage your account security. That is why we are excited to introduce Two-Factor Authentication (2FA).
Whether you have been with us for years or just started your journey, here is everything you need to know about this new way to protect your account.
What exactly is 2FA?
Think of your password like the front door key to your house. It works well, but if someone else gets a copy, they can walk right in.
Two-Factor Authentication (2FA) adds a second "lock" to that door. Even if someone knows your password, they cannot get in without a special one-time code generated by your mobile device. This ensures that you are the only person who can access your Woozworld account.
How to Activate 2FA (TotP)
You can set up 2FA using a Time-based One-Time Password (TotP). To do this, you will need an authenticator app (such as Google Authenticator (Android / iOS), 2FAS (Android / iOS), Authy (Android / iOS), or any other TotP authenticator) installed on your phone or tablet.
On the Web Version:
- Log in to your account on the Woozworld website.
- Go to Account Settings.
- Click on Manage 2FA.
- You'll first need to enter your current password and answer to secret question to make sure it's really you adding 2FA to your account
- Then click on "Set up Authenticator App"
- A QR code will appear. Scan this with your authenticator app.
- Enter the 6-digit code shown in your app to verify and complete the setup.
On the Mobile App:
- Open the Woozworld app and tap on Settings (the gear icon).
- In My Account, tap on Authentication options.
- You'll first need to enter your current password and answer to secret question to make sure it's really you adding 2FA to your account
- Tap on Add
- Since you'll likely use the same device for 2FA that you're playing on, just tap the Open Authenticator App button. This will automatically open your preferred app and add your Woozworld account for you. If you'd rather keep your codes on a different device, you can simply scan the QR code shown on your screen instead.
- Switch back to Woozworld, tap on "Continue to Code", and enter the code from the app to confirm.
Critical Step: Your Backup Codes
Once you have verified your code, we will provide you with 10 unique Backup Codes.
This is the most important part of the setup: You must copy these codes and save them somewhere extremely safe (like a physical notebook or a secure file).
- One-Time Use: Keep in mind that each backup code can only be used once.
- The Last Resort: If you ever lose your phone or delete your authenticator app, these codes are the only way to get back into your account.
Please understand that if you lose access to both your authenticator app and your backup codes, we will not be able to help you recover your account. Safety is a shared responsibility!
Logging In and "Remember Me"
Once 2FA is active, you will be asked for a code from your authenticator app the next time you sign in.
To make things easier, you can check the "Remember this device" box when you enter your code. This allows you to skip the 2FA step on that specific device for the next 30 days. After 30 days, we will ask for a new code just to make sure everything is still secure.
Modern Security: Using Passkeys
We also support Passkeys for the web version of Woozworld. Passkeys allow you to sign in using your computer's biometric data (like TouchID or FaceID) or your browser's secure storage.
How to set it up:
- Go to Account Settings > Manage 2FA
- In the "Passkeys" section, give a name to your device and click "Add a new device"
- After created, you'll see it appear in the list of allowed passkeys:
Important Note: Passkeys are currently a Web-only feature. If you set up a Passkey, you will not be able to log in to the Woozworld Mobile App for now. If you use both mobile and web, we recommend using the TotP (authenticator app) method instead.
Do I have to use it?
No. 2FA is completely optional, and you are not forced to activate it. We want you to choose the level of security that feels right for you.
However, with account phishing and password leaks being common online, 2FA is the most effective shield you have to protect your rare items and your account's history.
Stay safe and happy Woozing!