To improve account security, many popular websites have enabled two-step verification/two-factor authentication. You may optionally enable this for your forum account. In addition to your forum password, you will be required to provide a second set of credentials to complete your login. If someone were to obtain your forum password, they would not be able to login without the second set of credentials. To simplify the two-step login, you may register your device(s) as a trusted device for 30 days and you will not be prompted for the second set of credentials when logging in/out of the forum. At any time, you can revoke your trusted device(s). Go here to set up two-step verification. You will be asked for your forum password Select the two-step verification method you would like to use If you select the Verification Code via App option, you will be required to have the 3rd party apps installed. To stop trusting a device or if you need to revoke that trust for other devices, you can do this from the two-step verification setup page.
I don't use the phone and no one else uses my home computer. Should I still have a second password or verification?
Two-step verification is fine, in my opinion, for financial and other life-critical websites (banks, brokerages, anything having to do with your money or your job), but for a site about station wagons? Really? Someone is going to steal my login credentials for this site so they can do what? Log in as me and make nasty comments about someone's car? That seems unlikely, and, even if somebody did something like that, it's hardly a life-shattering event on a par with having your identity stolen or your bank account cleaned out. In short, two-step verification is really overkill for a site like this.
Two-step verification is optional and can be beneficial to members who login to the forums on devices that they are temporarily using. If they forget to logout from the device and no longer have access to it, they can revoke the trust for that device. In most cases its overkill, however this is a standard feature that is a part of the software.
True, but, in reality, prior to the addition of this feature with this software (and this site has been around for many years now), exactly how many times was this a problem for someone? I'm going to guess zero or nearly zero. If someone now does use a public computer to access the site and forgets to log off, how many of them are going to remember that "revoking the trust" for that device is something they can do (which they would have to do from another computer), and, even if they do remember that they can revoke the trust, how many of them will know HOW to do it? I've got nothing against the feature, and more power to those who want to use it, but this is a classic example of fixing something that ain't broken.
This feature is part of the new forum software, I did not develop it. This guide tells you how to do it. If you go through the trouble of setting it up, the odds are that you use this elsewhere and would know about revoking a trusted device. The software developers add features based on demand on customer demands https://xenforo.com/community/threads/two-step-verification-and-security-improvements.99881/