Hello LFS Racers,
As part of the ongoing security updates, We have made a change which is significant in a way while not technically a big change.
The WEB password is now called simply "password" and you can no longer manually set a GAME password.
The GAME password is now called "unlock code" and is set automatically and sent to you in an email when you click a link on your details page.
In the next few days we will start passing through and zeroing any old GAME passwords that have not been updated for the new system.
EDIT: Now that we have already zeroed the old GAME passwords...
How to use your unlock code:
Please install the test patch with better support for the new unlock code.
Test patch: [EDIT: official version is now available]
Then...
1) Visit details page
2) Click: send email with a new unlock code
3) Get email
4) Paste code from email into LFS "GAME password" (or "Unlock code" in the new test patch)
5) Click unlock
The "GAME password" or "Unlock code" field is in the LFS unlock screen, accessible by a button at the bottom right of the entry screen.
If you do not have access to your registered email account:
You will need to register a current email address to receive your unlock code. But with our improved security, to change email instantly you need to confirm the change by receiving an email on your old address. Alternatively you can wait 7 days to proceed without confirming the email on your old address.
To do this, visit your details page and click the link "send email to set new address" even though you know you won't receive the email. Now you can see the time, 7 days ahead, when you will be able to set a new email address without the instant confirmation. This time remains visible on your details page.
Why do we need confirmation on the old email address or force you to wait 7 days?
This is to prevent license theft by anyone who manages to log into your account by somehow obtaining your password. Some people may have had passwords that were easy to guess. Others entered their LFS user name and password into at least one site run by hackers. This really happened and we had to rescue hundreds of accounts and return them to their original owners.
Before recent changes it was possible to change password and emails instantly, enabling theft of licenses. Now we send an email to the old email address and we give the recipient seven days to respond.
As part of the ongoing security updates, We have made a change which is significant in a way while not technically a big change.
The WEB password is now called simply "password" and you can no longer manually set a GAME password.
The GAME password is now called "unlock code" and is set automatically and sent to you in an email when you click a link on your details page.
In the next few days we will start passing through and zeroing any old GAME passwords that have not been updated for the new system.
EDIT: Now that we have already zeroed the old GAME passwords...
How to use your unlock code:
Please install the test patch with better support for the new unlock code.
Test patch: [EDIT: official version is now available]
Then...
1) Visit details page
2) Click: send email with a new unlock code
3) Get email
4) Paste code from email into LFS "GAME password" (or "Unlock code" in the new test patch)
5) Click unlock
The "GAME password" or "Unlock code" field is in the LFS unlock screen, accessible by a button at the bottom right of the entry screen.
If you do not have access to your registered email account:
You will need to register a current email address to receive your unlock code. But with our improved security, to change email instantly you need to confirm the change by receiving an email on your old address. Alternatively you can wait 7 days to proceed without confirming the email on your old address.
To do this, visit your details page and click the link "send email to set new address" even though you know you won't receive the email. Now you can see the time, 7 days ahead, when you will be able to set a new email address without the instant confirmation. This time remains visible on your details page.
Why do we need confirmation on the old email address or force you to wait 7 days?
This is to prevent license theft by anyone who manages to log into your account by somehow obtaining your password. Some people may have had passwords that were easy to guess. Others entered their LFS user name and password into at least one site run by hackers. This really happened and we had to rescue hundreds of accounts and return them to their original owners.
Before recent changes it was possible to change password and emails instantly, enabling theft of licenses. Now we send an email to the old email address and we give the recipient seven days to respond.