Member account sharing detection
Kris (mymember.site)
Member account locked if account sharing detected - logged in from too many different IPs within a certain amount of time. Notification sent to admin and member.
Log In
Kris (mymember.site)
Probably going to tackle this one very soon I think.
Stan
what about two-factor-authentification for new ip (code to email)?
Kris (mymember.site)
Stan: What we can do is give you a bunch of options to choose from. Too much security can annoy members but up to you. We can certainly allow you to force a 2FA for unusual circumstances including new IP addresses. Good idea.
Haven Moss
Kris (mymember.site) As annoying as 2FA is, it is greatly preferred over being completely locked out because you logged in from a different location.
(I had this happen at Envato, a website template company, since I mainly used the account at work, when I needed to download templates from home they would just not allow me on. That's extremely frustrating when you've paid for a subscription. To make matters worse, rather than a message saying you were logged in from too many locations they would just say the website was down.)
Kris (mymember.site)
Haven Moss: We decided to not automate anything except for the notification to the site admin. You can then look into the activity and do what you want with that.
Haven Moss
Kris (mymember.site) Good choice, especially since users in many states already have to jump through extra hoops to log in, with all the age verification laws going into place.