This article explains the various account recovery options available here on the New Team of Weapons and Tactics Network so you can keep your account secure. We know it's a huge headache to get locked out of your profile because you forgot an email password, let a custom domain expire, or lost your phone. To make sure you never permanently lose access to your community identity, we built a custom, multi-layered Account Recovery System. This guide covers how to set up your backup verification methods so you always stay in control.
When you click Generate New Key in your settings, the system builds a secure code and displays it to you exactly once. You need to write it down, print it out, or drop it straight into a trusted password manager immediately.
We operate under strict zero-knowledge standards. Our staff and database admins cannot view your plain-text key. The second it's generated, the system runs it through an advanced cryptographic hash and stores it in an unreadable format. This is a massive security upgrade over standard, readable database fields.
Just head over to our public Contact Us form or the Report Center while logged out. You'll need to provide:
An authorized admin will drop your string into our blind verification tool. If the resulting hash matches what's in our database, it unlocks an isolated reset mechanism. From there, our administration team can directly restore your forum access.
This triggers a 72-hour escrow process. The system fires off warning emails to your primary and backup addresses letting you know an emergency recovery is underway. This 72-hour window gives you plenty of time to cancel the request if it was made by mistake or by a bad actor.
If the 72 hours pass and the request wasn't canceled, the system generates a secure handover token and sends it to Member B. They can then pass that link to you over a secure channel—like a phone call, text, or a brand new email address. You just use that link to set up a new email and password, and you're back in control.
Account Recovery Rules and Policies
To protect your profile from unauthorized access and social engineering, our recovery system runs on three strict rules:| Rule #1: The Primary Email Rules Everything Your primary registration email has the final say. If someone requests a change in your recovery settings, the system immediately fires an alert to your main inbox. This email includes a time-sensitive Panic Button. You can hit it to instantly cancel the request and lock down your profile. Because of this, you really need to keep your primary email updated. |
| Rule #2: Instant Session Kicks If a password reset is triggered through any recovery method, the system forcefully ends all active sessions across all your devices. Yes, that includes valid "Remember Me" tokens. If an attacker tries to reset your password while you're actively browsing the forum, you get logged out immediately. This gives you a clear early warning so you can step in and secure your account. |
| Rule #3: The 7-Day Security Freeze If someone resets an account password using a secondary or tertiary backup email, we instantly slap a 7-day security freeze on the profile. During this escrow window, the system completely blocks changing the primary email address and generating a new Master Recovery Key. This gives the true account owner a full week to notice the breach and shut it down using their primary inbox or an offline Master Recovery Key. |
How to Access Your Recovery Settings
Setting up your secure recovery options only takes a few minutes. Here's how to get there:- Head to the main Community Index and make sure you're logged in.
- Click your Avatar or Username up in the top navigation bar.
- Select Recovery Options from the drop-down menu.
- Since you're accessing sensitive security settings, the system will ask you to enter your current password.
- If you have Two-Factor Authentication (2FA) turned on, you'll also need to punch in your verification code.
Adding Backup Email Addresses
You can register up to three alternative email slots: Primary, Secondary, and Tertiary backups. These act as solid safety nets if your main inbox goes down or gets locked. Just make sure these point to mailboxes you actually control.- Email Provider Policy: All backup emails have to meet the same validation rules as your primary registration. We only accept verified, mainstream email services to cut down on spam and exploits. You can check our Allowed Email Services knowledge base article for the full list.
- Status Tracking: Every backup slot clearly shows its status: Empty, Pending Verification, or Verified.
- Verification Process: Adding a backup email requires your current forum password. The new address sits in a non-functional Pending state until you click the confirmation link sent directly to that specific backup inbox.
- Intrusion Alerts: If someone initiates a password reset using a backup email, your primary email address instantly gets a high-priority warning.
Warning: Using Friends or Family for Backup Emails
While the account recovery system can technically accepts any valid email format, we highly recommend against using inboxes belonging to friends, family, or acquaintances because of the massive risk that this entails.
If you need a backup email, we highly recommend just setting up a free, private email account dedicated purely to emergency recovery. It's much safer.
- Instant Account Ownership: Anyone who controls your backup email can execute a password reset and take total control of your forum profile.
- Collateral Damage: If your trusted friend or family member gets phished, loses their phone, or gets their email suspended, your account is now at risk.
- Things Change: Relationships evolve. If you tie your digital identity to someone else's email, your account access depends entirely on their cooperation later down the line.
Removing Backup Email Addresses
Need to swap out a backup email? Just click the Clear button next to the slot, or type in a new address and hit Save changes. This kicks off a strict removal procedure:- The backup destination goes into Pending Deletion for a mandatory 72-hour security hold.
- We send an explicit alert to your primary email letting you know about the removal request.
- We also send a verification email to the specific backup address you're trying to remove. This email includes a direct termination link, giving the inbox holder a chance to veto and block the removal during that 72-hour window.
- Once the 72 hours pass without a veto, the slot clears out.
Master Recovery Key (MRK)
The Master Recovery Key (or MRK) is our top-tier security feature. It completely replaces our old Recovery PIN system and acts as your ultimate cryptographic safety net. It looks a lot like a software license key—a 32-character string broken into eight blocks of four characters, separated by hyphens.When you click Generate New Key in your settings, the system builds a secure code and displays it to you exactly once. You need to write it down, print it out, or drop it straight into a trusted password manager immediately.
We operate under strict zero-knowledge standards. Our staff and database admins cannot view your plain-text key. The second it's generated, the system runs it through an advanced cryptographic hash and stores it in an unreadable format. This is a massive security upgrade over standard, readable database fields.
How to Use Your MRK in an Emergency
Let's say the absolute worst happens: you forget your password, lose your primary email, and your backup emails are dead. Your MRK gives you a backdoor way back in.Just head over to our public Contact Us form or the Report Center while logged out. You'll need to provide:
- Your exact community username.
- Your full, 32-character Master Recovery Key.
An authorized admin will drop your string into our blind verification tool. If the resulting hash matches what's in our database, it unlocks an isolated reset mechanism. From there, our administration team can directly restore your forum access.
A Very Real Warning
Treat your MRK like the key to a safe deposit box. If you lose this code and simultaneously lose access to all your email accounts, we have absolutely no technical way to verify your identity. Your account becomes permanently unrecoverable. Please audit your profile regularly to keep your primary details accurate, keep an MRK stashed somewhere safe, and check your backup paths. If you think your MRK leaked or you simply lost it, just generate a new one from your control panel. That instantly kills the old key.
The Trusted Member Option
To give you one more lifeline, we offer a Trusted Member feature. This lets you pick someone in the community you genuinely trust to initiate a password reset on your behalf. It's incredibly handy if you somehow lose access to your primary email, all your backups, and your MRK.How It Works
Imagine you lose all access to your account. You get in touch with your trusted friend (let's call them Member B). Member B logs into their own account and hits the Initiate Recovery button for your profile.This triggers a 72-hour escrow process. The system fires off warning emails to your primary and backup addresses letting you know an emergency recovery is underway. This 72-hour window gives you plenty of time to cancel the request if it was made by mistake or by a bad actor.
If the 72 hours pass and the request wasn't canceled, the system generates a secure handover token and sends it to Member B. They can then pass that link to you over a secure channel—like a phone call, text, or a brand new email address. You just use that link to set up a new email and password, and you're back in control.