Roblox introduces Enhanced Protection with advanced 2FA or Passkeys for creators

Roblox recently announced Enhanced Protection for creators on the developer forum. It’s one of the strongest forms of 2-step verification, effectively neutralizing attacks that bypass traditional 2FA by intercepting or stealing one-time codes.

Since top creators are more susceptible to targeted attacks, Roblox is strongly urging high-profile developers and security-conscious users to adopt the feature immediately. It’s worth noting that using this protection is completely optional, but it provides a layer of extra security once you enable it.

The new 2SV method is more phishing-resistant, since Passkeys are the primary way to sign in and handle 2SV challenges. Hardware security keys are still supported for sign-in challenges on compatible platforms. However, they’ve disabled email one-time passcodes and authenticator apps for the Enhanced Protection feature. If you sign in with a password, you must complete the passkey.

To enable Enhanced Protection, go to Settings and then hit Security. From there, you can find the option. To enable it, you need at least one passkey and a verified email. Additionally, you also have to add a verified phone number or save backup codes. Since Passkeys can be lost, these additional recovery options are crucial. The new policy says that you need two distinct challenges to regain access to any 2SV-enabled account.

Feedback from developers is rather positive, and multiple creators called it a major victory over Discord phishing and other cyber attacks that have plagued the platform. One of them noted that it feels like Apple’s Lockdown Mode for Roblox accounts.

Others highlighted that the new method verifies the exact domains before authentication, effectively blocking off fake login pages. Additionally, Roblox also clarified that the Enhanced Protection is coming to Roblox Studio.

This shift toward ‘professional-grade’ security arrives at a critical juncture for the company. Roblox has been under intense pressure to fortify its platform, recently settling a massive $35.8 million lawsuit with several U.S. states over child safety concerns, as reported by Bloomberg.

In other Roblox news, the company is reportedly sending cease-and-desist letters to major condo game creators. We covered that here.

We stand out from the tech-media crowd because we break news stories; we mainly bring you stuff that you won’t find anywhere in the mainstream tech media. Our stories have been picked up by some of the world’s most popular websites and media outlets—more info is available here.