VeteranDB has introduced email-based two-factor authentication alongside a broader account-security update. The additional login step requires members to enter a code sent to their verified email address when they have not completed a qualifying verification within the previous 30 days.
The update adds protection between password entry and account access. When additional verification is required, entering the correct password does not create an authenticated session. Members must successfully complete the emailed-code step before gaining access.
Additional Verification at Login
Members who have never completed a qualifying verification, or whose last qualifying verification occurred more than 30 days earlier, are prompted to complete the additional step.
The process sends a six-digit code to the account’s verified email address. After successful verification, members can continue into VeteranDB.
The 30-day window reduces how often returning members encounter the additional step while maintaining a recurring verification requirement. Completing email verification also satisfies that requirement for the applicable window.
Protection Extends to Password Recovery
Password reset follows the same additional verification requirement when applicable. Resetting a password therefore does not bypass the verification needed to establish an authenticated session.
This connects account recovery with the protections used during login and provides a more consistent access process.
Stronger Session and Login Safeguards
The release also strengthens how VeteranDB handles authenticated sessions. Access credentials are now held in an HTTP-only cookie, which prevents page scripts from reading that cookie directly.
Additional safeguards address repeated login attempts and account-takeover risks identified during development of the verification feature.
Together, these changes strengthen account protection across login, recovery, and session handling.
Protecting Access to Organization Tools
VeteranDB accounts can carry responsibilities beyond an individual profile, including managing organization listings, coordinating team access, and working with published content.
Strengthening account access helps protect those responsibilities and the organizations that depend on them. Each team member continues to use an individual account, with access determined by their assigned roles and permissions.
Members should ensure they can access the verified email address associated with their account so they can receive verification codes when prompted.
Members can sign in at https://VeteranDB.com. Those who encounter the additional verification step should follow the on-screen instructions to complete access.
About VeteranDB
VeteranDB is a platform connecting the Veteran community with businesses, nonprofits, podcasts, resources, and editorial content. Through public listings, organization tools, verification, and publishing opportunities, VeteranDB helps people discover and support the individuals and organizations serving the community.