LOG-008 is two colors that don’t work unless you turn on the thing that makes your account harder to break into.
The setup
The accent color was already a picker — green, blue, amber, red, purple, and eventually pink, each one just a hue value swapped in under a shared token so the whole site’s palette shifts with it. Adding more colors to the list would have been the easy version of this. What actually got asked for was two colors that mean something: silver and gold, unlocked only once two-factor authentication is turned on.
Why gate a color behind security
Nobody turns on 2FA because a settings page told them to. A checkbox that says “recommended” competes with a dozen other checkboxes that also say that, and loses. Wanting a color is a small, real reason — the kind that actually gets someone to open their authenticator app and finish the setup, in a way “this improves your account security” reliably doesn’t. The two colors staying locked behind account security specifically, rather than behind rank or post count, keeps the reward pointed at exactly the behavior it’s meant to encourage.
How the lock actually works
The color picker already ran on a shared token — one hue value, swapped under CSS custom properties, the same handful of lines styling every accent regardless of which one is active. Adding a gate meant checking Two_Factor_Core::is_user_using_two_factor() before silver or gold ever reach the picker, not styling two more buttons and hoping nobody clicks them without qualifying. If 2FA gets turned off later, the lock re-applies the same way — there’s no separate “grandfathered in” state to accidentally leave open.
Why this is LOG-008
Most of what makes a site feel worth coming back to isn’t the feature — it’s the one small thing tied to a color you actually want.