The Security page keeps your DFS Hero account yours. It has three cards: Change Password, Two-Factor Authentication, and Connected Accounts. Open it from Settings in the top bar, then Security.
Before you start
- Have your current password. Every change on this page asks for it.
- For two-factor authentication, install an authenticator app on your phone, such as Google Authenticator, Authy, or 1Password.
Change your password
- Type your Current Password.
- Type a New Password. It needs at least 8 characters, an uppercase letter, a lowercase letter, a number, and a special character. The maximum is 72 characters.
- Type it again under Confirm New Password.
- Click Update Password.
Every other browser and phone is signed out and must sign in again with the new password.
Two-factor authentication
Two-factor authentication (2FA) requires a 6-digit code from an authenticator app after your password. Text message codes are not a 2FA option. Turn it on before you add a payment card; the account holds your billing details and every playbook you built.
Turn 2FA on
- Click Enable.
- Type your password under Password and click Continue.
- Scan the QR code with your authenticator app. If the app cannot scan, type the Manual entry key shown under the code.
- Save the 10 backup codes with Copy codes or Download. Each one works once, and this is the only time you will see them. Store them in your password manager, not in a screenshot on the phone that holds the authenticator.
- Type the 6-digit code from the app under Verification code and click Verify.
2FA protects your account only after step 5 succeeds. Turning 2FA on does not sign out your other devices.
Sign in with 2FA
- Enter your email and password on the sign-in page and click Sign In.
- Type the 6-digit code from your authenticator app under Verification code.
- Lost your phone? Click Use a backup code instead, type one code under Backup code, and click Verify.
The challenge lasts 10 minutes. After that, sign in again to get a new one.
Regenerate or turn off
- Regenerate backup codes: type your password, click Confirm, save the 10 new codes, and click I have saved these codes. The old codes stop working. Regenerate after you use one; a short list runs out fast.
- Turn off: type your password and click Confirm. Sign-in goes back to password only.
Connected accounts
Discord is the only account you can link, and it is link-only: you still sign in with your email and password. A linked Discord account unlocks Use Discord Avatar on the Profile page, the Discord Community widget on the Dashboard, and Discord level credits. See Credits.
- Click Connect Discord, approve the request on Discord, and you return to this page with the row marked Connected.
- The refresh icon on a linked row reloads your Discord roles.
- Disconnect unlinks Discord. Your sign-in is unaffected, and you can reconnect at any time.
Sessions and signing out
- A sign-in lasts 30 days on that browser or phone.
- To sign out of the device you are on, open the avatar menu at the top right and click Sign out.
- To sign out everywhere, change your password. A password reset from the sign-in page does the same. Settings has no list of active sessions.
Phone verification
DFS Hero verified a US or Canadian mobile number when you signed up. Landline and VoIP numbers are refused. To change the number, edit Phone Number on the Profile page and verify the new number with a 6-digit text code. See Profile and appearance.
Reset a lost password
- On the sign-in page click Forgot password?.
- Type your email and click Send Reset Link.
- Open the email "Reset Your DFS Hero Password" and click Reset password. The link lasts 30 minutes.
- Type a New Password and Confirm Password and click Reset Password.
- Click Sign In.
Every other session is signed out on reset. DFS Hero also emails you when your password changes, so you know when a change was not yours. If it was not, reset your password at once and contact [email protected].
Delete your account
Settings has no delete-account button. To close your account, cancel the subscription from the Subscription page, then contact support to ask for deletion. See Contact support. Cancelling on its own already removes your builds, entry history, Film Room history, playbooks, and settings at the end of the billing period. See Manage your subscription.
Tips
- Use your password manager's generator. A long random password passes all five rules at once.
- Link Discord. It unlocks the Discord avatar, the Dashboard community widget, and Discord level credits.
Troubleshooting
"Current password is required" : the first field is empty. Type your current password.
"Current password is incorrect" : the password did not match. Type it again, or reset it from the sign-in page.
"Passwords do not match" : the two new password fields differ. Retype the confirmation.
"Password must be at least 8 characters", "Password must contain at least one uppercase letter", "Password must contain at least one lowercase letter", "Password must contain at least one number", or "Password must contain at least one special character" : the new password fails a rule. Fix it until every rule turns green.
"Password must be 72 characters or fewer" : the new password is too long. Shorten it.
"Cannot update password for accounts using social login" : this account has no password to change. Your sign-in method is not a password.
"Invalid code. Please try again." during 2FA setup : the 6-digit code did not match. Check that the phone's clock is set automatically and type the newest code.
"That code is incorrect. Check your authenticator app and try again." at sign-in : the code expired or was mistyped. Wait for the next code.
"That backup code is invalid, or it has already been used. Each code only works once." : pick an unused code from your saved list.
"This sign-in challenge has expired. Sign in again to get a new one." : more than 10 minutes passed. Click Back to sign in and start over.
"Cannot disconnect your only login method. Add a password or connect another account first." : Discord is the only way into this account. Set a password first.
"Discord token expired. Please reconnect your Discord account." : the Discord link went stale. Click Disconnect, then Connect Discord again.
"This reset link is invalid or has expired." : the reset link is older than 30 minutes or was already used. Click Request New Reset Link.
"Too many password reset requests. Try again later." : the limit is 3 reset emails per hour per address. Wait and check your spam folder.
"Too many requests. Please try again later." at sign-in : more than 10 attempts in a short time. Wait a few minutes.
"Your session is no longer valid. Please sign in again." : the sign-in expired while you edited. Sign in and retry.
Related
Was this article helpful?