diff --git a/pool/page_2fa.php b/pool/page_2fa.php index 7648bd12..4ec7330a 100644 --- a/pool/page_2fa.php +++ b/pool/page_2fa.php @@ -105,6 +105,14 @@ function set_2fa($data, $user, $tfa, $ans, $err) $pg .= 'that you type into the "*2nd Authentication:" field on any page that has it.

'; $pg .= 'IMPORTANT: the TOTP algorithm uses the time on your device,
'; $pg .= "so it is important that your device's clock is accurate within a few seconds.

"; + $pg .= 'IMPORTANT: you enter the value from your App at the time you submit data.
'; + $pg .= "The value is valid only once for a maximum of 30 seconds.
"; + $pg .= "In both the Apps it has a 'dial' that shows the 30 seconds running out.
"; + $pg .= "If you are close to running out, you can wait for the 30 seconds to run out
"; + $pg .= "and then enter the new value it will come up with.
"; + $pg .= "The pool checks your value using the time at the pool when you submit the data,
"; + $pg .= "it doesn't matter when you loaded the web page,
"; + $pg .= "it only matters when you clicked on the web page button to send the data to the pool.

"; $pg .= 'WARNING: once you have successfully tested and enabled 2FA,
'; $pg .= 'you will be unable to access or even reset your account without 2FA.
'; $pg .= 'There is no option to recover your 2FA from the web site,
';