How important is the security token? Because it's annoying to use.

I play exclusively on PS4, I don't have a PC account (which I imagine would be a lot easier to steal). My FFXIV account is tied to my PSN account, is it not? So for someone who has my FFXIV password it won't do them any good if they don't have my PSN account, unless they want to log into my mog station and change credit card information.

I ask because keeping track of my little red button is becoming frustrating with two kids in the house who love little red buttons. Does it offer some amazing security I'm just not getting otherwise, or is the fact that my account is only PS4-accessible enough to deter would-be thieves? Also connecting from upstairs using Remote Play sucks if I forget to bring the token upstairs.

I use different passwords on both my PSN account and my FFXIV account, before anyone asks.

As an alternative, how does the smartphone app compare in terms of security? I always have my phone with me.

Well if your account for whatever reason gets hacked and you lose everything you gained in game, I'd imagine you would be screaming "why didn't I use the token" it's very important, also free teleport for using it :)

Apart from the fact that it's almost a 100% fool proof way to secure your account, it also allows you to set one free teleport point. If those two things aren't worth keeping track of your number generator then it's not for you. There is an app for it, which I suppose can be hacked. However, I find it unlikely that anybody would go through the trouble of stealing/hacking a phone for the purpose of targeting your FFXIV account. So I'd say the phone app is just as secure as the key fob.

Quote:

---

Originally Posted by Crushbone-Hammerfist

As an alternative, how does the smartphone app compare in terms of security? I always have my phone with me.

---

Equivalent. I've got two physical tokens I could be using. I switched to the app as soon as it became available.

Put the token with your keys? I always end up with mine in my pocket as a result. I hate authenticators on phones for a couple of reasons.

First: Your phone is already a high-value item that is prone to theft. Why would you want to add to that value?
Second: There is a likelihood of your phone having to be factory reset, or the app removed in some form or another down the line which invalidates the sync.

Yeah, I'm on a PS4 also & wish the game would auto log me in at start up, just like every other online multiplayer game. No one is hacking my psn account & no one is hacking the other online games.

Quote:

---

Originally Posted by kidvideo

No one is hacking my psn account & no one is hacking the other online games.

---

Yep, I would completely trust Sony, they have such a reputation for maintaining the security of the PSN, and would never let the data for millions of accounts with personal information and credit card details be hackackachBWAHAHAHAHAHA AHAHAHA AHAAAHAAA .

It is a very important piece of security because your user-name, PW and most other acct information is stored on a server outside of your PS4/PS3/PC/etc which can potentially be hacked into. As far as your acct being tied only to the one system, while farfetched it's not impossible that a hacker would also have access to methods like key generators to grant them access to play a stolen acct on a PC.

Think back to a couple of years ago when the PSN was hacked into. It was confirmed that "USERNAMES and PASSWORDS" were among the leaked info. Say that this was your XIV acct and a compromise of this nature took place on square's servers (not saying it would but theft is always possible), prior to the hack being discovered if there was no One time PW they could get right into ANY unprotected acct for which they had the info for. The One Time PW is everchanging and very difficult to verify or track making VERY VALUABLE.

You have kids?! You filthy casual gtfo my MMO!

Seriously though to me it's worth the extra security, but I can understand having kids who have sneaky little hands. I'd say keep it and just try to find a good place to keep it out of reach. If not, then I guess you'll have to without. Just be vigilant on your password and account info.

Quote:

---

Originally Posted by kidvideo

Yeah, I'm on a PS4 also & wish the game would auto log me in at start up, just like every other online multiplayer game. No one is hacking my psn account & no one is hacking the other online games.

---

Yup.
http://en.wikipedia.org/wiki/PlayStation_Network_outage
https://www.soe.com/securityupdate/
http://www.engadget.com/2013/07/02/u...y-breach-hack/
http://us.blizzard.com/en-us/securityupdate.html

Because the internet is SAFE..

The only thing that is important about it, is that it adds another layer of protection that is incredibly difficult to get around. The questions you should ask yourself is whether or not you care for that extra security, and how much faith you have in the PSN securing your account for you.

It's not necessary to have the token by any means. But I know I feel safer for having it.

Having token: You spend 1 extra minute putting a code in.

Not having token: your account gets hacked, it takes 3 months to try and contact customer service and after 3 months you will either get your account back with almost all your items missing, or you will never see your character or items again.


Take your pick!

My SIM card on my phone was messing up, and as a result, last Saturday, my software token reset. I couldn't play all weekend, and had to wait for FIVE TWELVEDAMNED HOURS yesterday to talk to someone who could reset it. Unless they give us a way to use a single key password to set it back up in case something like this happens again, or they at least put in a 'remember this token on this computer for X days' feature, I'm just going to rely on my infallible four-common-word password:

http://imgs.xkcd.com/comics/password_strength.png

By the way, my password is not correcthorsebatterystaple.

The same thing happened to Square the same year. I never had any problems from the Sony outage & they have since increased their security. This was a great lesson for both Sony & SE. I trust them.

http://en.wikipedia.org/wiki/PlaySta...rsonal_details

And I am the only one who uses my PS4. Other online games give you the option of auto login or remembering your password. Just like any website. If you have kids, don't use it.

You know all those RMT tells you get? Those are from compromised accounts.

There is a Security password to remove the mobile App Token.
:)

Quote:

---

Originally Posted by Livilda

My SIM card on my phone was messing up, and as a result, last Saturday, my software token reset. I couldn't play all weekend, and had to wait for FIVE TWELVEDAMNED HOURS yesterday to talk to someone who could reset it. Unless they give us a way to use a single key password to set it back up in case something like this happens again, or they at least put in a 'remember this token on this computer for X days' feature, I'm just going to rely on my infallible four-common-word password:

---

That's what the emergency removal password they give you when you register the token is for. I've removed & reinstated the software token on my account a few times due to switching phones or having it desync. Hold on to the removal password they give you & the whole process only takes a few minutes.

Quote:

---

Originally Posted by Livilda

snip

---

There is a one time password you can use to drop your token. I still haven't set mine up, but it is there.

Quote:

---

Originally Posted by Freyar

You know all those RMT tells you get? Those are from compromised accounts.

---

Those are not compromised accounts. Those are gil farmers from China.

My token sits behind my monitor, no one goes behind it, it has like cobwebs and stuff.

Quote:

---

Originally Posted by Crushbone-Hammerfist

As an alternative, how does the smartphone app compare in terms of security? I always have my phone with me.

---

The smartphone app is free so....why wouldn't you get it?

Quote:

---

Originally Posted by Freyar

You know all those RMT tells you get? Those are from compromised accounts.

---

Unlikely. An account with a pre-leveled and pre-geared character is valuable for resale, and RMT shout-bots are banned generally within hours. A compromised account would be stripped of valuables and sold to folks looking to join the game already set for endgame; if it was used to shout for RMT, it'd quickly be banned and become worthless. Shout-bots are level 1 characters that are mass-generated to keep up with the bans, not compromised accounts.

Quote:

---

Originally Posted by LineageRazor

Unlikely. An account with a pre-leveled and pre-geared character is valuable for resale, and RMT shout-bots are banned generally within hours. A compromised account would be stripped of valuables and sold to folks looking to join the game already set for endgame; if it was used to shout for RMT, it'd quickly be banned and become worthless. Shout-bots are level 1 characters that are mass-generated to keep up with the bans, not compromised accounts.

---

Hmn, I don't know if they'd resell. Considering that you can work to get your account back, I imagine they'd rather strip you of clothing/gil, send it to an off-character account, and then use that as a shout bot - because if it gets banned, they lose nothing. But if it gets taken back mid-transaction, they lose -all- potential sells from it.

Quote:

---

Originally Posted by kidvideo

Those are not compromised accounts. Those are gil farmers from China.

---

They're a mix of both new and compromised account. Also, a rather large number of them are Russian and not Chinese.

Quote:

---

Originally Posted by Cigaran

They're a mix of both new and compromised account. Also, a rather large number of them are Russian and not Chinese.

---

It was a figure of speech. The country of origin is unimportant. I doubt any of them are compromised accounts. If an account is compromised there is a recovery process like all other online websites. If the email account someone signed up with is also compromised, then they are sol. Until then, the majority of us are safe & secure, our login info would be encrytped, hashed & salted on SE's end. I want a simple autologin.

Do all the people screaming "It's tied to my PSN account!" not realize that that means absolutely nothing? If somebody has your account info, they could log in on a PC just fine no matter what else it's linked to.

Quote:

---

Originally Posted by MurakumoMillennium

If somebody has your account info, .

---

This part, is not going to happen. Taking your logic to another scenario, if someone has your bank card & pin number, they will have your money. Also something that is not going to happen for me.

Go ahead, take it off your account, I DARE you.

Quote:

---

Originally Posted by kidvideo

This part, is not going to happen. Taking your logic to another scenario, if someone has your bank card & pin number, they will have your money. Also something that is not going to happen for me.

---

And what information did you use to log into these forums? oh right.... so how secure is YOUR computer?

Like said before PSN was down for a long time because it was compromised so it's not impossible to steal your info, probably improbable.

Quote:

---

Originally Posted by Crushbone-Hammerfist

As an alternative, how does the smartphone app compare in terms of security? I always have my phone with me.

---

Wow I thought only people with no WIFi or smart phone used tokens. The app is a must literally only adds 30secs max to login.

Setup on your mogstion which doesn't take long and register your phone with some code that is given. After that set the app/key to your home page somewhere and with only ONE press it will present your code. That's all it do. Not like you have to log in the app and get a code it comes up instantly once pressed.

I'm pretty sure you guard your phone with your life like I do when my nephew is around I carry mine every where too.

Seriously, how much longer does it take to enter in your password and stuff? Is having that extra 30s of gaming that important? You get a free tele point..MOREOVER, you can tele to that point then tele to an area around it saving even more money had you teled to the final destination to start.

This sort of thinking:

Quote:

---

Originally Posted by kidvideo

Yeah, I'm on a PS4 also & wish the game would auto log me in at start up, just like every other online multiplayer game. No one is hacking my psn account & no one is hacking the other online games.

---

is along the same lines of: "why do I need to buy health insurance? I am never sick and I don't do anything stupid."

Quote:

---

Originally Posted by kidvideo

This part, is not going to happen. Taking your logic to another scenario, if someone has your bank card & pin number, they will have your money. Also something that is not going to happen for me.

---

You do understand how bank cards and PIN numbers work right? (ref: http://www.youtube.com/watch?v=UXHJ2S8wug4 ) If someone with ill intent had your bank card and pin number, the only way they would not get your money is if there was no money in your account...

Quote:

---

Originally Posted by Moheeheeko

Go ahead, take it off your account, I DARE you.

And what information did you use to log into these forums? oh right.... so how secure is YOUR computer?

---

username & password. & again, no one has it but me.

Quote:

---

Originally Posted by kidvideo

username & password. & again, no one has it but me.

---

and whoever has spyware on your pc.

/eyeroll

Quote:

---

Originally Posted by Daenerys_Sedai

"lulzs" .

---

This is hardly the same comparison. "Health" cannot be encrypted. Nor can it be backed by a bank or credit card agency, so an account holder is not obligated for fraudulent charges.

btw, your sky is falling.

Quote:

---

Originally Posted by Moheeheeko

and whoever has spyware on your pc.

/eyeroll

---

lulz, not on a mac. Come one! Honestly, do you think someone is going to put spyware on a computer to get our precious FFXIV logins? ... can't stop laughing at the absurdity...

Quote:

---

Originally Posted by kidvideo

lulz, not on a mac. Come one! Honestly, do you think someone is going to put spyware on a computer to get our precious FFXIV logins? ... can't stop laughing at the absurdity...

---

Thats adorable <3

Quote:

---

Originally Posted by kidvideo

This is hardly the same comparison. "Health" cannot be encrypted. Nor can it be backed by a bank or credit card agency, so an account holder is not obligated for fraudulent charges.

btw, your sky is falling.

---

ok, clearly, you cannot make sense of analogies. This had nothing to do with health but, rather, the line of thinking that "because it hasn't happened to me, it's never going to happen." Fallacious reasoning to be sure. Also, I'm not sure you understand the meaning of the phrase "sky is falling" because I cannot make sense of its application here. I will give you a pass though because I'm not sure English is your native language.

Anyway, done with this troll of a thread.
xoxo

Quote:

---

Originally Posted by kidvideo

lulz, not on a mac. Come one! Honestly, do you think someone is going to put spyware on a computer to get our precious FFXIV logins? ... can't stop laughing at the absurdity...

---

Is that sarcasm? I hope that's sarcasm.

Anyways, I feel better having the token than not having it. And like someone else said, you could try putting the token on your keys?

Quote:

---

Originally Posted by kidvideo

lulz, not on a mac. Come one! Honestly, do you think someone is going to put spyware on a computer to get our precious FFXIV logins? ... can't stop laughing at the absurdity...

---

The reason people believe this is because it HAS already happened, and not just in XIV but it's pretty notorious within WoW.
In fact in XIV there were reports of compromised accounts that didn't have tokens attached to them, having a token placed on them by whoever stole it, making it even harder for the victim to regain their account.

And no spyware on Mac?... it's cute that you still believe that Apple Propaganda.

Quote:

---

Originally Posted by Daenerys_Sedai

ok, clearly, you cannot make sense of analogies.
xoxo

---

Rude.

http://i1372.photobucket.com/albums/...psd1d3512c.jpg

While most FFXIV accounts are less useful to those who would try to steal them than a lot of MMO accounts may have been in the past (mostly because every valuable piece of armor/ weaponry that you have is account bound if you've ever used it), people do still try to steal accounts. There's gil at the very least, and the possibility of selling the account.

I'm not very worried about security personally. Statistically nothing is likely to happen to me (or any one user in particular), but some accounts will surely be compromised and have been already. In any case, the free teleport to Mor Dhona (or wherever you like) is more than enough reason to tack on 15 seconds to my login times.