Why wukongjitu recommends two-factor authentication
Account security is foundational to our platform. We encrypt all passwords, monitor for suspicious login patterns, and maintain compliance with data-protection standards. However, passwords alone can be compromised through phishing, credential leaks, or social engineering. Two-factor authentication on wukongjitu adds a layer that attackers cannot bypass without physical access to your phone.
Our members who play across multiple devices—desktop at home, mobile during commutes, tablet during travel—benefit most from 2FA. If someone attempts to log into your wukongjitu account from an unfamiliar device or location, our system prompts for a 2FA code. You receive this code on your registered phone, so you immediately know if an unauthorized login attempt occurred. You can then deny the login and change your password if needed.
We do not mandate 2FA, but we strongly encourage it, especially if you maintain a substantial balance on wukongjitu or regularly withdraw funds. Members in Jakarta, Surabaya, Bandung, Medan, and Semarang who use public WiFi or shared devices find 2FA particularly valuable.
How wukongjitu 2FA protects your account
When 2FA is active, every login requires two pieces of information: your password and a time-based code from your phone. Even if an attacker knows your password, they cannot access your account without the code. Our system generates new codes every 30 seconds, making them impossible to predict or reuse.
We support two 2FA methods: SMS codes sent to your registered phone number, and authenticator apps (Google Authenticator, Microsoft Authenticator, Authy). Authenticator apps are more secure because they do not rely on SMS interception, but SMS remains available as a backup option.
Setting up two-factor authentication on wukongjitu
Enabling 2FA on your wukongjitu account takes approximately subject to verification. Here is the step-by-step process:
- Log into your wukongjitu account and navigate to Account Settings → Security.
- Select "Enable Two-Factor Authentication." Our system displays two options: SMS or Authenticator App. Choose your preferred method.
- For Authenticator App: Download Google Authenticator, Microsoft Authenticator, or Authy on your phone. Return to wukongjitu and scan the QR code displayed on your screen. The app generates a 6-digit code.
- For SMS: Confirm your phone number. We send a verification code to your phone; enter it on wukongjitu to confirm.
- Save backup codes. We provide 10 single-use backup codes. Store these in a safe location (password manager, secure note, printed copy). If you lose access to your phone, backup codes let you regain account access.
- Test your 2FA. Log out of wukongjitu, then log back in. You will be prompted for your 2FA code. Enter the code from your authenticator app or SMS to complete login.
Two-factor authentication on wukongjitu transforms your account from password-protected to cryptographically verified—a meaningful security upgrade that takes minutes to enable.
Using 2FA during daily wukongjitu play
Once 2FA is active, your login flow changes slightly. When you enter your wukongjitu username and password, our system recognizes your device and asks for your 2FA code. If you are logging in from a new device or location, we always request 2FA confirmation—this is intentional and protects your account.
On your primary device (the phone where your authenticator app is installed), you can optionally enable "Remember this device for 30 days." This reduces 2FA prompts on that specific device, though we still require 2FA for sensitive actions like withdrawals or password changes. This balance between convenience and security lets you enjoy frictionless daily play on wukongjitu while maintaining strong protection.
2FA during slot tournaments and live play
Our slot tournaments (Aviator, Sweet Bonanza, Gates of Olympus, Fortune Tiger, Mahjong Ways) and live-dealer tables (blackjack, roulette, baccarat, Dragon Tiger) do not require 2FA re-entry during active play. Once you log in with 2FA, your session remains authenticated until you log out or your session expires.
However, if you attempt to withdraw funds or change your account settings during play, we may prompt for 2FA confirmation again. This extra verification protects your balance and ensures only you can authorize withdrawals to your DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or bank account (mobile banking, local payment, online payment, e-wallet).
Troubleshooting 2FA issues on wukongjitu
If you cannot access your 2FA code, first check that your phone's time is synchronized correctly. Authenticator apps rely on precise time; if your phone clock is off by more than a few minutes, codes will not match. Adjust your phone's date and time settings, then try the new code generated by your authenticator app.
If you have lost access to your phone or your authenticator app, use one of your backup codes to log into wukongjitu. Navigate to Account Settings → Security and disable 2FA temporarily. You can then re-enable it with a new authenticator app or phone number. Our support team can assist if you have lost both your phone and your backup codes—contact us via live chat or email with proof of account ownership (email address, recent transaction details), and we will help you regain access.
2FA best practices on wukongjitu
- Use an authenticator app (Google Authenticator, Microsoft Authenticator, Authy) rather than SMS for stronger security.
- Store your backup codes in a secure location—password manager, encrypted note, or printed copy in a safe.
- Keep your phone's time synchronized; authenticator codes expire every 30 seconds.
- Enable "Remember this device" on your primary device to reduce login friction while maintaining security.
- If you change phones, disable 2FA on your old device and re-enable it on your new device before discarding the old phone.
2FA and account recovery on wukongjitu
If you forget your wukongjitu password, our account recovery flow remains straightforward. We send a password-reset link to your registered email address. Once you reset your password, you can log in normally—2FA will prompt for your code as usual. Your 2FA settings remain unchanged during password recovery.
However, if you lose access to both your password and your 2FA phone, account recovery becomes more complex. This is intentional—we prioritize account security over convenience in edge cases. Our support team can verify your identity through email confirmation, recent transaction history, or identity document verification, then help you regain access. This process typically takes 24-48 hours during business days.
To avoid this scenario, we recommend storing your backup codes securely and keeping your registered email address active and monitored. If you plan to change phones, disable 2FA before switching devices, then re-enable it on your new phone.