Question about Square Enix security token

So I have one of these but I think the battery is almost dead so I wanted to buy a new one. On the SE account page I click the link but it just leads to a page not found.

Here is the link https://www.square-enix.com/na/token/

Try this link instead

https://store.na.square-enix-games.c...security-token

updated with EU version sorry
https://store.eu.square-enix-games.c...security-token


or download the app for your mobile which is free?

Quote:

---

Originally Posted by Bearded

or download the app for your mobile which is free?

---

did they ever fix it, i remember hearing about it bugging and not really working well

Quote:

---

Originally Posted by stanrir

did they ever fix it, i remember hearing about it bugging and not really working well

---

I mean, it works for most people just fine. It's only buggy if you have Google fi and switch networks. Or so I've heard. And also, they give you a way to remove it if the app breaks. Most people just don't pay attention and forget to save the emergency removal password.

Quote:

---

Originally Posted by Valkyrie_Lenneth

I mean, it works for most people just fine. It's only buggy if you have Google fi and switch networks. Or so I've heard. And also, they give you a way to remove it if the app breaks. Most people just don't pay attention and forget to save the emergency removal password.

---

Over all the app is just poor. I stopped using it a while back because they only allow you to install it on one device. I have 2 phones that I swap between. Also loooong ago when I use to root my phones it didn't work well either.

In short, take notes from Blizzard on how they allow you to install it on more than one device. Also how they allow you to save a backup code for easy restore if needed. SE is still living 10 years in the past when it comes to their security token and hell even the game launcher.

Quote:

---

Originally Posted by Krojack

Over all the app is just poor. I stopped using it a while back because they only allow you to install it on one device. I have 2 phones that I swap between. Also loooong ago when I use to root my phones it didn't work well either.

In short, take notes from Blizzard on how they allow you to install it on more than one device. Also how they allow you to save a backup code for easy restore if needed. SE is still living 10 years in the past when it comes to their security token and hell even the game launcher.

---

All the phone does is emulate what the physical security token does.
It's fine for what it is. You can only use one physical token, it makes sense that it'd only be on one phone.
There's still a backup code as well to remove it, I dunno what you mean otherwise.

Quote:

---

Originally Posted by Krojack

Over all the app is just poor. I stopped using it a while back because they only allow you to install it on one device. I have 2 phones that I swap between. Also loooong ago when I use to root my phones it didn't work well either.

In short, take notes from Blizzard on how they allow you to install it on more than one device. Also how they allow you to save a backup code for easy restore if needed. SE is still living 10 years in the past when it comes to their security token and hell even the game launcher.

---

The reason it only allows one phone is so that your brother or whatever cant steal your phone, log in, add his own phone and then suddenly have access to your account without your knowledge. Or, If not a family member, someone who actively wants to steal the usage of your account because otherwise they'd need to physically steal your phone and for that they'd need to know where you live and by that point it's probably easier for them to break in and steal your whole PC instead of stealing and then selling your account, for example.

What's so difficult about knowing which phone is the one with the security token on it, if you have two and swap between them?

the FF14 Secruity token already has an emergency removal password they give you when you add it to your account. They also give you actual in-game incentives to add a security token to your account.

At the end of the day, using it makes you far more secure and you get rewarded for it, and you're complaining about being unable to put it on, as far as they're concerned, a compromised phone?

Quote:

---

Originally Posted by stanrir

did they ever fix it, i remember hearing about it bugging and not really working well

---

I'm using it for years and didn't had any issue so far. Maybe a rumor spread by rmt because ruining their business? lol

It's no worse than half of the other software security tokens out there, but neither is it any better.

That said, I'm very tired of companies making their own variant two-factor code; I would vastly prefer they used the standard TOTP (RFC 6238) or HOTP (RFC 4226) authentication. That way you could use anything that supported those standards. Be it things like Token2 hardware tokens, or Google's Authenticator software, or ecoystems like Authy or 1Password. Then I could stop having like five different custom authenticators installed on my phone for different systems.

(Especially since I cannot see any appreciable security benefit to SquareEnix's OTP implementation, versus TOTP or HOTP.)

Quote:

---

Originally Posted by LalaRu

I'm using it for years and didn't had any issue so far.

---

Same, I haven't had any issues with mine either. Personally, I like the app better than the physical token.

Quote:

---

Originally Posted by Packetdancer

It's no worse than half of the other software security tokens out there, but neither is it any better.

That said, I'm very tired of companies making their own variant two-factor code; I would vastly prefer they used the standard TOTP (RFC 6238) or HOTP (RFC 4226) authentication. That way you could use anything that supported those standards. Be it things like Token2 hardware tokens, or Google's Authenticator software, or ecoystems like Authy or 1Password. Then I could stop having like five different custom authenticators installed on my phone for different systems.

(Especially since I cannot see any appreciable security benefit to SquareEnix's OTP implementation, versus TOTP or HOTP.)

---

I mean, SE has had theirs out for 11 years now.
Why change what works? Seems to be SE's policy on many things.

Quote:

---

Originally Posted by Canadane

I mean, SE has had theirs out for 11 years now.
Why change what works? Seems to be SE's policy on many things.

---

Because it's one less thing to maintain; if you maintain a custom-built software token, then as the mobile operating systems update, sooner or later you need to redo the app to update it for a newer operating system. Things that were written for iOS 2.0 are very different than things written for iOS 13, just as things written for Android 2.4 and Android 10.0 are extremely different; in neither case would the original code compile for a newer system.

If you rely on standards-driven authenticators, then you don't have to maintain anything; you just tell people to use Google Authenticator, or Authy, or 1Password, or anything else that supports TOTP/HOTP.

As to why they don't, when it would mean less long-term work?

¯\_(ツ)_/¯

Quote:

---

Originally Posted by Packetdancer

Because it's one less thing to maintain; if you maintain a custom-built software token, then as the mobile operating systems update, sooner or later you need to redo the app to update it for a newer operating system. Things that were written for iOS 2.0 are very different than things written for iOS 13, just as things written for Android 2.4 and Android 10.0 are extremely different; in neither case would the original code compile for a newer system.

If you rely on standards-driven authenticators, then you don't have to maintain anything; you just tell people to use Google Authenticator, or Authy, or 1Password, or anything else that supports TOTP/HOTP.

As to why they don't, when it would mean less long-term work?

¯\_(ツ)_/¯

---

I wish the standard works like FFXIV's app. I find it nicer to use than Google authenticator (or equivalent).