Important Update about Two-Factor Authentication (2FA)

[spamPorpoise]

Hey modders! If you are part of our official Discord server, you may have seen this already, but we figured we ought to post this here as well to increase visibility.

Please update your Two-Factor Authentication (2FA) settings

We have discovered an issue with our Two-Factor Authentication (2FA) system. You may be unable to use your recovery codes to log in if you lose your authenticator device. To ensure you don't lose access to your account in future, please see the instructions below.

What is the issue?

When Two-Factor Authentication is activated on Nexus Mods, we present you with five backup codes that can be used in place of your 2FA device if you ever lose access to it. Due to a bug, these backup codes were not stored in our system for some users which means they cannot be used to log in as we have no record of them. If this applies to your account you will receive an email version of this message.

Is my account security compromised?

No. This issue does not compromise the security of your account. Taking no action means your account remains secure, but you may not be able to use your 2FA backup codes to log in.

What do I need to do?

We have fixed the problem, but all users affected by this issue will need to follow the steps below:

1. Log in to your account and navigate to your security settings.
2. Click the "Disable 2FA" button, enter the code on your authenticator device and confirm. To avoid confusion, remove the 2FA code from your authenticator app too.
3. Click the "Set Up 2FA" button and follow the instructions.
4. Once 2FA is enabled, you will be presented with 5 backup codes. Keep these in a safe place.

If you no longer have access to your 2FA device, please see our Account Recovery page for additional ways to regain access to your account.