Topicle ^Beta

Thanks, really appreciate all the detailed feedback.

1. Passkeys are implemented for the admin account only, but two-factor on user accounts is planned, but not implemented yet.

2. Email verification is actually implemented, but can be toggled on and off depending on the growth phase.

3. If you check your Settings section in 'Sessions', this is implemented, if I'm understanding you correctly: https://topicle.com/settings?tab=sessions. All your currently active sessions, their location and IP address is surfaced to the user. You can also sign out your other sessions. I considered adding email warnings if logins occur in a weird geographic location but this seemed like perhaps overkill. But still not ruled out for the future.

4. This is interesting, I have a pretty extensive list of datacentre IPs and VPNs that are blocked, so the account based in shouldn't change depending on your VPN status. But if it does, it means this feature is not properly implemented and needs to be fixed. This is pretty valuable feedback and a gap that needs to be addressed! I'll work on plugging this gap today.

Thanks for all the feedback. Definitely not a matter of bugger off, really appreciate you engaging so deeply with the material on a security front. It's one of the things I'm obsessing over because I want the site to be as impervious as possible to astroturf, bots, bad actors, anyone with ill intent and other platforms seem to have left exploitable gaps here.