{"id":2915,"date":"2026-04-24T05:57:02","date_gmt":"2026-04-24T05:57:02","guid":{"rendered":"https:\/\/arttao.net\/?page_id=2915"},"modified":"2026-04-24T05:57:02","modified_gmt":"2026-04-24T05:57:02","slug":"4-account-security","status":"publish","type":"page","link":"https:\/\/arttao.net\/en\/4-%e8%b4%a6%e6%88%b7-%e5%ae%89%e5%85%a8\/","title":{"rendered":"4. Account\/Security"},"content":{"rendered":"<p class=\"wp-block-paragraph\">. Account\/Security<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li>What is Two-Factor Validation (TFA)?<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">Two-factor authentication requires entering a one-time verification code after entering the password to log in, significantly improving account security.<\/p>\n\n\n\n<ol start=\"2\" class=\"wp-block-list\">\n<li>How do I enable two-factor authentication?<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">After logging in, go to &quot;My Account &gt; Security Settings&quot;, select to enable &quot;Two-factor authentication&quot;, scan the QR code and enter the verification code to complete the binding.<\/p>\n\n\n\n<ol start=\"3\" class=\"wp-block-list\">\n<li>Which verification methods are supported?<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">It supports SMS, email verification codes, and Authenticator applications (such as Google Authenticator and Authy).<\/p>\n\n\n\n<ol start=\"4\" class=\"wp-block-list\">\n<li>Where is the two-factor authentication setting in the AIOS plugin?<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">Administrators can enable mandatory TFA in the backend under &quot;AIOS &gt; User Security&quot;, and users can bind the authenticator by scanning the QR code in &quot;Account Security&quot;.<\/p>\n\n\n\n<ol start=\"5\" class=\"wp-block-list\">\n<li>Why use TFA?<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">Even if the password is leaked, hackers still need a verification code to log in, effectively preventing brute-force attacks and account theft.<\/p>\n\n\n\n<ol start=\"6\" class=\"wp-block-list\">\n<li>How do I log in if I forgot my phone?<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">You can use a pre-saved &quot;backup verification code&quot; or log in temporarily via email verification.<\/p>\n\n\n\n<ol start=\"7\" class=\"wp-block-list\">\n<li>What is a backup verification code?<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">When TFA is enabled, the system will generate a one-time backup code. Please keep it safe in case your phone is lost.<\/p>\n\n\n\n<ol start=\"8\" class=\"wp-block-list\">\n<li>How do I change the linked phone number or authenticator?<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">Log in to your account, go to &quot;My Account &gt; Security Settings&quot; and turn TFA off and then back on, then bind the new device.<\/p>\n\n\n\n<ol start=\"9\" class=\"wp-block-list\">\n<li>What should I do if my phone is lost or unusable?<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">Log in using the alternative verification code, and contact customer service as soon as possible to unbind or change to a new verification method.<\/p>\n\n\n\n<ol start=\"10\" class=\"wp-block-list\">\n<li>Can I use only an email verification code?<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">Yes, but we recommend using a verification app or SMS for greater security and reliability.<\/p>\n\n\n\n<ol start=\"11\" class=\"wp-block-list\">\n<li>Does it support forcing all users to enable TFA?<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">Yes, administrators can set it up centrally in the backend, requiring users to bind an authenticator the next time they log in.<\/p>\n\n\n\n<ol start=\"12\" class=\"wp-block-list\">\n<li>How often should I reset my password?<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">It is recommended to update every 90 days, or make changes immediately upon discovering suspicious logins.<\/p>\n\n\n\n<ol start=\"13\" class=\"wp-block-list\">\n<li>How do I reset my password?<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">On the login page, click &quot;Forgot Password,&quot; enter your registered email address, and you will receive a reset link. Follow the prompts to set a new password.<\/p>\n\n\n\n<ol start=\"14\" class=\"wp-block-list\">\n<li>What should I do if I don&#039;t receive the password reset email?<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">First, check your spam\/junk folder and blocking rules to ensure your email address is spelled correctly; if you still receive no emails, please contact customer service to manually reset it.<\/p>\n\n\n\n<ol start=\"15\" class=\"wp-block-list\">\n<li>How long does it take for the password reset to take effect?<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">The new password will take effect immediately upon successful setup, and the old password will no longer be valid for login.<\/p>\n\n\n\n<ol start=\"16\" class=\"wp-block-list\">\n<li>Can I set a previous password?<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">For security reasons, the system does not allow the reuse of the three most recent passwords.<\/p>\n\n\n\n<ol start=\"17\" class=\"wp-block-list\">\n<li>Are there any complexity requirements for passwords?<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">It must be at least 8 characters long, including uppercase and lowercase letters and numbers. It is recommended to add symbols to improve security.<\/p>\n\n\n\n<ol start=\"18\" class=\"wp-block-list\">\n<li>How can I view my recent login history?<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">You can view your most recent login IP and time in &quot;My Account &gt; Security Log&quot;. If you find anything unusual, you can change your password immediately.<\/p>\n\n\n\n<ol start=\"19\" class=\"wp-block-list\">\n<li>What should I do if my account is locked?<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">Entering the wrong password multiple times may result in temporary locking. You can wait 30 minutes or contact customer service to unlock it.<\/p>\n\n\n\n<ol start=\"20\" class=\"wp-block-list\">\n<li>Is it possible to retrieve a password using a mobile phone number?<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">Users who have linked their mobile phone numbers can quickly reset their passwords via SMS verification code.<\/p>\n\n\n\n<ol start=\"21\" class=\"wp-block-list\">\n<li>Does the system support unified password reset for enterprise accounts?<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">Yes, administrators can force all users to change their passwords on their next login in the backend.<\/p>\n\n\n\n<ol start=\"22\" class=\"wp-block-list\">\n<li>Can the AIOS plugin restrict weak passwords?<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">Yes, the backend can enable a &quot;strong password policy&quot; to require users to set more secure passwords.<\/p>\n\n\n\n<ol start=\"23\" class=\"wp-block-list\">\n<li>How do I disable two-factor authentication?<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">In &quot;My Account &gt; Security Settings&quot;, you can turn off TFA. You will need to enter a verification code to confirm.<\/p>\n\n\n\n<ol start=\"24\" class=\"wp-block-list\">\n<li>How to improve overall account security?<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">It is recommended to use both strong passwords and two-factor authentication; avoid storing passwords on public devices; and check security logs regularly.<\/p>","protected":false},"excerpt":{"rendered":"<p>. \u8d26\u6237\/\u5b89\u5168 \u53cc\u91cd\u9a8c\u8bc1\u662f\u5728\u8f93\u5165\u5bc6\u7801\u540e\uff0c\u8fd8\u9700\u8f93\u5165\u4e00\u6b21\u6027\u9a8c\u8bc1\u7801\u624d\u80fd\u767b\u5f55\uff0c\u5927\u5e45\u63d0\u5347\u8d26\u6237\u5b89\u5168\u3002 \u767b\u5f55\u540e\u8fdb\u5165\u201c\u6211\u7684\u8d26\u6237 [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-2915","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/arttao.net\/en\/wp-json\/wp\/v2\/pages\/2915","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/arttao.net\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/arttao.net\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/arttao.net\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/arttao.net\/en\/wp-json\/wp\/v2\/comments?post=2915"}],"version-history":[{"count":1,"href":"https:\/\/arttao.net\/en\/wp-json\/wp\/v2\/pages\/2915\/revisions"}],"predecessor-version":[{"id":2917,"href":"https:\/\/arttao.net\/en\/wp-json\/wp\/v2\/pages\/2915\/revisions\/2917"}],"wp:attachment":[{"href":"https:\/\/arttao.net\/en\/wp-json\/wp\/v2\/media?parent=2915"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}