Yeah, this is really necessary. Since MFA was added for accounts, a lot of people who were already in the habit of stealing accounts have found a new way to do it. Many people have enabled MFA on their accounts, but there's still an open door for thieves: the Marketplace. There’s no MFA required when logging into the Marketplace, so your account is vulnerable without this option there.

For those wondering how it’s vulnerable, here’s how: people are making fake stores with high-value items, like 300K or 500K Lindens, which are just money-laundering items. Here’s an example: a thief guesses your password, tries to log into your account through the viewer, but can’t because you have MFA enabled. So where can they get in without MFA? The Marketplace. They log into your account there and make a purchase from their own fake store, draining your account by buying these high-priced items.

I know what I’m talking about because I’ve had close friends who’ve had large amounts of Lindens stolen this way more than once. Yes, these people filed tickets with LL and got their Lindens refunded, but it clearly shows the need for MFA on the Marketplace login too. I hope someone from LL sees this and realizes the need for security everywhere—not just for the account login, but for the Marketplace too, as it’s currently a vulnerable area.

Hello, good afternoon everyone.

I’m here to report a critical issue that needs to be urgently addressed on the Second Life Marketplace: the implementation of two-factor authentication (2FA) for account access. This is the second time this year that my Lindens have been stolen via the Marketplace. Someone gained access to my account, created an item in a secondary store, and drained all the funds from my account.

This situation is extremely concerning because, without an extra layer of security like 2FA, we are all vulnerable to this kind of attack. Implementing two-factor authentication would greatly enhance account security and protect users from unauthorized access.

I sincerely hope this suggestion is taken seriously by the team responsible. Thank you for your attention.

For those asking what MFA is: you might know it as 2-factor authentication, it's using an authenticator program to generate a small code that you put in after your password as an added protection measure against unauthorized logins.

This is already available for Second Life in general - you can set it up on your main Second Life account; it will then ask you for a code whenever you log in to the viewer (this can be snoozed) or when you're doing something sensitive on the website, like handling L$ batch out or process credit.

Expanding this to the Marketplace will add that login protection there as well, so people who know or guessed your password will have a harder time getting in there to cause problems.

I think many people don't understand what this ticket is

What is this ticket about? Tell us more? What does multi-factor authentication mean in Marketplace?

Please do this. Marketplace is horrible for searching