---

Account security and friction-free sign-in are top priorities in MPX 3.0. In this release, we have rolled out enterprise-grade credential upgrades, two-factor authentication, and one-click social authentication.

1. Seamless Argon2id Password Security Bridge

• Deployed an automatic cryptographic password bridge supporting historical MyBB MD5-salt and Bcrypt hashes.
• Existing members do not need to reset passwords: upon your first sign-in, your credentials are automatically and transparently upgraded to modern Argon2id hashing in real time.

2. Two-Factor Authentication (2FA) Support

• Added native RFC 6238 Time-based One-Time Password (TOTP) two-factor authentication challenge.
• Compatible with Google Authenticator, Authy, 1Password, and Apple Passwords.
• Available to all members under UserCP > Security, with mandatory 2FA enforcement for Staff and Administration ranks.

3. Multi-Provider Social Authentication

• Instant one-click sign-in and registration via leading OAuth providers:
  • Google
  • GitHub
  • Discord
  • Telegram
• Seamlessly link or unlink social identity accounts at any time inside your User Control Panel.

4. Multi-Device Active Session Tracker

• Track every device currently signed into your account with detailed device icons, browser agent parsing, IP address, and last active timestamps.
• One-click remote logout option to instantly revoke suspicious or obsolete sessions across all devices.

---