Starting next week, Shooting House will enable two-factor authentication (2FA) for all administrative users of the system.
Why this change is being implemented
Administrative access to the system involves sensitive data about your club, including member information, ammunition and firearm collection control, financial data and documentation required by regulatory bodies. A single password, no matter how strong, is no longer enough to protect this kind of information. Password leaks, phishing attempts and credential reuse on other websites are currently among the main causes of unauthorized access to corporate systems.
With two-factor authentication, even if an administrative user’s password is discovered by a third party, access will still depend on a second code, sent directly to the account holder. This additional layer significantly reduces the risk of unauthorized access to the club’s data.
Step already completed
In the first stage of this process, when accessing the system, administrative users began to see a request to confirm their registered email and phone number. If this request no longer appears at login, it means the confirmation has already been completed successfully and no further action is required at this time.
What happens next week
Next week, two-factor authentication will be officially enabled for all administrative users. From that moment on, logging in will require, in addition to the password, a verification code sent through one of the following channels, in the order shown:
- Email: the primary channel for sending the code.
- WhatsApp: used if delivery by email is not completed successfully.
- SMS: used only if the two previous channels fail.
Verification will not be requested at every login
Two-factor authentication will not be required on every access to the system. Users will have the option to keep the device remembered for up to 30 days, which means that, in practice, verification will be requested at most once a month, not at every login.
What you need to do
No additional action is required beyond the email and phone confirmation already completed in the first stage. When 2FA is enabled, the login process will follow the usual flow, and the system will automatically request the code through the available channel, respecting the option to remember the device for 30 days.
Data security is not additional bureaucracy in the club’s routine. It is about protecting something that was built over time, with dedication and effort. Shooting House continues to invest so that this protection is delivered without compromising the simplicity of the system’s daily use.
Signed,
The Shooting House Team