Thank you for your patience as we recover from the recent incident.
We’re introducing One-Time PIN (OTP) functionality to certain seller features.
This feature is only accessible to sellers and is an opt-in feature, however,
it is highly recommended.
OTPs will be sent to the email address associated with your BrickLink account.
One verification code lasts for 60 days on a single machine ID (one browser on
a specific device). This verification process should not impact integrations
with third-party inventory managers.
My first reactions is that the OTP is being tied to an email account. If I then
tie the email account to a 2FA SMS based authentication (similar to what BL is
doing with OTP) that would make it very difficult for anyone to breach both the
email and BL. Tie all that together with strong passwords.