• 2FA now works with social sign-in (Discord, Google and other providers), accepting an app code, an emailed code or a recovery code.
• Module updates install in place: changed patches show update ready and keep your original backups.
• Missing backups are downloaded from GitHub for the site's own NamelessMC version, and checked against the known stock file on 2.2.5. A stock file is never patched without a backup, and Revert reports any file it could not restore.
• StaffCP 2FA page: clearer status when 2FA is already active, backup status per file, and it fits on phones.
• User CP 2FA section and sign-in buttons: tidier on phones and readable in dark mode. Text contrast meets WCAG AA.
• StaffCP sidebar: the 2FA link has its own Security heading.

Updating: extract the archive into your NamelessMC root folder (it replaces modules/2fa), then open StaffCP → 2FA and click Apply patches.