I really want to be able to have actual users for games, chat, etc, so I'm testing that system out! It's pretty basic for now and only used in worm race so far, but I'm planning on rolling out more features over time as I get the hang of things.
Passwords are encrypted and I've generally tried to use good security practices, though I'm sure there's more to be added as I go. There's also a limit on how many times you can fail entering a password before being locked out. Since the current userbase is very small there's no automated account recovery system yet, but if you contact admin@codecreature.net from the email associated with your account I can reset things for you.
I've set some basic password requirements, including bans on all variations of the most common passwords (sorry to anyone relying on P@ssword123, but it's for your own good.) As with any online account, I strongly recommend using a password manager so that one security breach on any site doesn't create security risks on every site you've ever used. I'm doing my best here but you should never trust any site with the keys to your entire life online!
Update Log