Player PIN & Authenticator
What it does
Section titled “What it does”Players can add a second check on top of their password: a PIN, an authenticator app on their phone, or both. This page decides which of the two players are offered and when they are asked for it.
Everything here is off by default. Turning something on only offers it - players opt in from their own profile, and nobody is forced to set one up.
Where to find it
Section titled “Where to find it”Security & Access -> Player PIN & Authenticator
The settings
Section titled “The settings”- Offer a PIN - players can choose a PIN from their profile.
- Offer an authenticator app - players can link an authenticator app on their phone from their profile, and get backup codes for when the phone is lost.
- Ask at login - after the password, a player who set up a PIN or an authenticator must enter it to log in.
- Ask before withdraw - a player who set up a PIN or an authenticator must enter it before each withdrawal.
The two ask settings do nothing while neither a PIN nor an authenticator is offered.
A player who set up both is asked for the authenticator code, not the PIN.
Change the switches, then click Save.
Who can do what
Section titled “Who can do what”Staff whose role has this menu can view the settings. Only the owner and a Platform staff account can change them.
Reset a player’s PIN and authenticator
Section titled “Reset a player’s PIN and authenticator”When a player forgets their PIN or loses their phone, CS can reset it:
- Open the player from the Player List.
- On the Profile tab, the PIN & Authenticator card shows whether the player has a PIN and an authenticator, how many backup codes are left, and when they can try again after too many wrong entries.
- Click Reset PIN & authenticator and confirm.
The reset removes the player’s PIN, authenticator and backup codes, clears the wait after wrong entries, and logs the player out on every device. The player then logs in with their password and can set up a PIN or authenticator again from their profile. Every reset is recorded in the activity log. A page the player already has open can keep working for up to 15 minutes before it asks them to log in again.
The reset button shows only to the owner and to staff whose role has the Reset player PIN and authenticator permission, under Player List in the role editor. No role has it by default - grant it only to trusted CS staff.