Restriction from my own login

The title is a bit misleading but here's my situation. I'm currently logging in from two different places, my house and my cousin's. The first time I tried to log in from my cousin's, my account was restricted but I was able to log in once I've went to my e-mail and changed my password. I thought that this would "whitelist" my cousin's IP address for my account but it turns out that I have to do this EVERY TIME I log in from my cousin's place. Not only that but his own account is also getting flagged and restricted from this.

My questions are: 1) Is there any way to "whitelist" another IP address for an account? 2) Should my cousin's account be getting flagged too or is there something wrong with the security on my cousin's computer?

Without using the security token (free phone app or the standalone physical token you buy for $11 or 1100 Crysta), you will keep running into this. It is a security check--they are seeing mismatched accounts/IP addresses and flagging the account in case someone is trying to hack into it.

So there's absolutely no way to "whiteflag" IP addresses at all then? You're restricted to 1 IP address per account? Well, that's stupid. I understand the need of security measures but this is overboard. With a whitelist, I'm pretty much confirming that it's me. Why not make a whitelist that requires e-mail confirmation? With the current system, if someone manages to get your account info AND access to your e-mail, they've pretty much stolen your account already anyways.

Also, when the ARR first came out, I was sharing my brother's account even though he doesn't live with me and had a different IP address. I never once ran into this problem. Is this a new security implanted within the last year?

It is an extra layer of security...take your pick on which one you want: name/password/IP address or name/password/one-time-use-password. One is considerably harder to spoof than the other. Otherwise, all they need is your user/password to log in right away and steal your stuff as soon as you log out. This at least slows them down a bit, forcing them to be a bit more selective on their targets I guess.

Should probably seriously consider one of the tokens or set up the free smartphone app. You will be far better secured and no longer have to deal with the hassle anymore. As an added bonus you get a free teleport option you can assign to any crystal in the game and port to it as often as your teleport cooldown allows.

its like when your at a store paying for something, and your card gets declined bcuz the bank placed a suspicious spending hold on it. its annoying, but its for your benefit. otherwise we'd be seeing posts like "boo hoo my account got hacked"

Add the (free) software security token (or buy the low cost physical one) and add it to your account. Not only can you then get a free teleport destination (that you can change whenever you want), but it also overrides the IP check so you can login wherever you want without care if your IP changes (because only the owner would be able to generate the one time password from the security token).