Introducing Spooky ID! Enhanced Security, Passkeys & More

Hey everyone, we have now migrated to the our Authentication Platform Spooky ID, giving you more control & security!

How to login

- Continue to use your existing email & password & 2FA code (if applicable) or OAuth Provider (Google/Discord) linked on the Hub to login to Spooky ID.

New features

- Spooky ID supports passkey (FIDO2/CTAP2) authentication & as 2FA (U2F/CTAP1), you can now login quickly to Spooky Services just using your fingerprint or other biometrics!
- More OAuth providers are supported - now, we have brought back GitHub OAuth and added Allen ID.
- Backup codes (Static Tokens) can now be issued at your discretion. These codes can recover your account in the case that you lost your other MFA tokens.
- Email alerts are now sent on important security events.

Setting up passkeys (WebAuthn)

- To set up a passkey, head to your user settings -> Credentials -> MFA Devices -> WebAuthn Device
- If the security key is FIDO2-compliant, it will be automatically allowed for login use when you use the "Use a security key" button in the login page.
- If your device type is automatically detected (Google, YubiKey etc.) by Spooky ID, it is very likely FIDO2-compliant and can be used for login.
- All U2F (CTAP1) / non-FIDO2 key types cannot be detected automatically.

Limitations

- Currently, setting a profile picture is not possible directly, it will be implemented soon. Meanwhile, you may set your profile picture via Gravatar. 

Spooky Services