Changelog

Two-factor authentication, account recovery codes, and a tighter sign-in flow.

• NewTime-based two-factor authentication (TOTP) for accounts, with downloadable one-time recovery codes at /auth/2fa.
• ImprovedMigrated to Discord-only authentication — password sign-in retired. Legacy password routes now return 410 Gone.
• SecurityRecovery codes are stored hashed and invalidated on use; reused codes are rejected.
• ImprovedSign-in form accessibility — proper labels, focus order, and theme-aware contrast on every vertical.

Connect more accounts and link your presence across platforms.

• NewSocial account linking via Google, GitHub, Twitch, and X/Twitter OAuth in addition to Discord.
• NewVerified creator profile pages with linked platform accounts and public Trust Score.
• ImprovedOAuth state is single-use and bound to the session to prevent CSRF on the callback.
• FixedLinking an account already tied to another user now returns a clear conflict message instead of a 500.

Trust Score, reviews, and the creator watchlist.

• NewTrust Score — a transparent 0–100 reputation signal, with an interactive simulator at /tools/trust-simulator.
• NewCommunity reviews on creator profiles, with rate-limited submission and moderation hooks.
• NewPersonal watchlist — track accounts and get flagged if they hit the global blacklist.
• ImprovedTrust Score weighting now factors account age, linked platforms, and report history.

A faster, atomic rate limiter and hardened security headers.

• NewDurable-Object backed rate limiter for accurate, atomic per-key limits across the edge.
• SecurityStrict Content-Security-Policy, HSTS, and frame/MIME protections applied site-wide.
• ImprovedBlacklist lookups now read through a hot KV cache, cutting median response time.
• FixedRate-limit counters no longer drift under burst traffic from concurrent edge locations.

VerifyUGC launches — the global blacklist, Discord bot, and hero search.

• NewPublic global blacklist search with the homepage hero search — check any Roblox, Discord, or Epic/UEFN account.
• NewFree Discord bot for server gatekeeping and blacklist alerts.
• NewKV-backed session management with secure, HTTP-only cookies.
• NewPer-vertical theming for Roblox, Fortnite/UEFN, and Minecraft sub-sites.
• NewDeveloper API with keys, single + batch checks, and read-only webhooks.