This article explains the various account recovery options available here on the New Team of Weapons and Tactics Network so you can keep your account secure. We know it's a huge headache to get locked out of your profile because you forgot an email password, let a custom domain expire, or lost your phone. To make sure you never permanently lose access to your community identity, we built a custom, multi-layered Account Recovery System. This guide covers how to set up your backup verification methods so you always stay in control.

Account Recovery Rules and Policies​

To protect your profile from unauthorized access and social engineering, our recovery system runs on three strict rules:

Rule #1: The Primary Email Rules Everything
Your primary registration email has the final say. If someone requests a change in your recovery settings, the system immediately fires an alert to your main inbox. This email includes a time-sensitive Panic Button. You can hit it to instantly cancel the request and lock down your profile. Because of this, you really need to keep your primary email updated.
Rule #2: Instant Session Kicks
If a password reset is triggered through any recovery method, the system forcefully ends all active sessions across all your devices. Yes, that includes valid "Remember Me" tokens. If an attacker tries to reset your password while you're actively browsing the forum, you get logged out immediately. This gives you a clear early warning so you can step in and secure your account.
Rule #3: The 7-Day Security Freeze
If someone resets an account password using a secondary or tertiary backup email, we instantly slap a 7-day security freeze on the profile. During this escrow window, the system completely blocks changing the primary email address and generating a new Master Recovery Key. This gives the true account owner a full week to notice the breach and shut it down using their primary inbox or an offline Master Recovery Key.

How to Access Your Recovery Settings​

Setting up your secure recovery options only takes a few minutes. Here's how to get there:
  1. Head to the main Community Index and make sure you're logged in.
  2. Click your Avatar or Username up in the top navigation bar.
  3. Select Recovery Options from the drop-down menu.
  4. Since you're accessing sensitive security settings, the system will ask you to enter your current password.
  5. If you have Two-Factor Authentication (2FA) turned on, you'll also need to punch in your verification code.

Adding Backup Email Addresses​

You can register up to three alternative email slots: Primary, Secondary, and Tertiary backups. These act as solid safety nets if your main inbox goes down or gets locked. Just make sure these point to mailboxes you actually control.
  • Email Provider Policy: All backup emails have to meet the same validation rules as your primary registration. We only accept verified, mainstream email services to cut down on spam and exploits. You can check our Allowed Email Services knowledge base article for the full list.
  • Status Tracking: Every backup slot clearly shows its status: Empty, Pending Verification, or Verified.
  • Verification Process: Adding a backup email requires your current forum password. The new address sits in a non-functional Pending state until you click the confirmation link sent directly to that specific backup inbox.
  • Intrusion Alerts: If someone initiates a password reset using a backup email, your primary email address instantly gets a high-priority warning.

⚠️ Warning: Using Friends or Family for Backup Emails

While the account recovery system can technically accepts any valid email format, we highly recommend against using inboxes belonging to friends, family, or acquaintances because of the massive risk that this entails.
  • Instant Account Ownership: Anyone who controls your backup email can execute a password reset and take total control of your forum profile.
  • Collateral Damage: If your trusted friend or family member gets phished, loses their phone, or gets their email suspended, your account is now at risk.
  • Things Change: Relationships evolve. If you tie your digital identity to someone else's email, your account access depends entirely on their cooperation later down the line.
If you need a backup email, we highly recommend just setting up a free, private email account dedicated purely to emergency recovery. It's much safer.

Removing Backup Email Addresses​

Need to swap out a backup email? Just click the Clear button next to the slot, or type in a new address and hit Save changes. This kicks off a strict removal procedure:
  • The backup destination goes into Pending Deletion for a mandatory 72-hour security hold.
  • We send an explicit alert to your primary email letting you know about the removal request.
  • We also send a verification email to the specific backup address you're trying to remove. This email includes a direct termination link, giving the inbox holder a chance to veto and block the removal during that 72-hour window.
  • Once the 72 hours pass without a veto, the slot clears out.
This forced time delay is basically your insurance policy. If you legitimately lose access to an old backup email, you don't need to log into it to remove it. Just request the deletion and wait out the 72 hours. On the flip side, if a hacker gets into your main account and tries to cut off your recovery channels, those backup addresses get instant warnings with a link to stop the attack dead in its tracks.

Master Recovery Key (MRK)​

The Master Recovery Key (or MRK) is our top-tier security feature. It completely replaces our old Recovery PIN system and acts as your ultimate cryptographic safety net. It looks a lot like a software license key—a 32-character string broken into eight blocks of four characters, separated by hyphens.

When you click Generate New Key in your settings, the system builds a secure code and displays it to you exactly once. You need to write it down, print it out, or drop it straight into a trusted password manager immediately.

We operate under strict zero-knowledge standards. Our staff and database admins cannot view your plain-text key. The second it's generated, the system runs it through an advanced cryptographic hash and stores it in an unreadable format. This is a massive security upgrade over standard, readable database fields.

How to Use Your MRK in an Emergency​

Let's say the absolute worst happens: you forget your password, lose your primary email, and your backup emails are dead. Your MRK gives you a backdoor way back in.

Just head over to our public Contact Us form or the Report Center while logged out. You'll need to provide:
  • Your exact community username.
  • Your full, 32-character Master Recovery Key.

An authorized admin will drop your string into our blind verification tool. If the resulting hash matches what's in our database, it unlocks an isolated reset mechanism. From there, our administration team can directly restore your forum access.

⚠️ A Very Real Warning
Treat your MRK like the key to a safe deposit box. If you lose this code and simultaneously lose access to all your email accounts, we have absolutely no technical way to verify your identity. Your account becomes permanently unrecoverable. Please audit your profile regularly to keep your primary details accurate, keep an MRK stashed somewhere safe, and check your backup paths. If you think your MRK leaked or you simply lost it, just generate a new one from your control panel. That instantly kills the old key.

The Trusted Member Option​

To give you one more lifeline, we offer a Trusted Member feature. This lets you pick someone in the community you genuinely trust to initiate a password reset on your behalf. It's incredibly handy if you somehow lose access to your primary email, all your backups, and your MRK.

How It Works​

Imagine you lose all access to your account. You get in touch with your trusted friend (let's call them Member B). Member B logs into their own account and hits the Initiate Recovery button for your profile.

This triggers a 72-hour escrow process. The system fires off warning emails to your primary and backup addresses letting you know an emergency recovery is underway. This 72-hour window gives you plenty of time to cancel the request if it was made by mistake or by a bad actor.

If the 72 hours pass and the request wasn't canceled, the system generates a secure handover token and sends it to Member B. They can then pass that link to you over a secure channel—like a phone call, text, or a brand new email address. You just use that link to set up a new email and password, and you're back in control.

Setting Up a Trusted Member​

Just go to your account recovery settings, find the Trusted Member field, and type in the name of the community member you trust with the keys.
Was this article helpful?