Account hacked and banned !!! GREAT

[Aramyth]

Everytime I see these threads I can do nothing but call BS. You've done something yourself to get I to this position.

I have no virus protection on my computer. Nothing. Zip. No security token. My password is 18 characters long and contains upper/lower case, numbers and a special character.

[Arriverderci]

The point of paying for a security token (or getting it for free using the Android/iOS app) is that you don't get hacked ...

So don't buy it or your screwed?
Simple enough.
They should of told you from the beginning. "If you don't get this token, you're going to get hacked."
We need pin numbers. When you log to your character, you set a Pin, IE. 6 numbers or so.
Not buy this and that. Luckily, I am on PS3 and not seen no PS3 hacked yet, and I have a token.
I blame the mass RMT sellers that come to us with no end, it's getting friggin' annoying!

It's a shame F2P games have better security than this BS. SOOO many games have Pin numbers!
GW2, has IP checker things or whatever. They will E-mail if you not using your own internet, then you confirm it is you.
I mean plenty of options here SE.

[Ryuni]

The hackers don't are not randomly guessing people's e-mails and then figure out their password with various means. No, they get these e-mails from various places on the internet and possibly on FFXIV fansites with security holes.

If you're so hellbent on not getting a security token, learn the basics of internet security by using a different e-mail for different purposes and long complicated passwords. I have one e-mail that is only used for registering services that I pay for, another e-mail for forums and various community sites and whatnot that I visit regularly, then finally an e-mail for all spam and untrustworthy websites. All these e-mails uses different password so it wouldn't hurt me if the website/spam e-mails were hacked/stolen.

In my 15 years of playing MMOs, from Ragnarok Online beta until today, I've played loads and loads of F2P MMOs as well, I have never gotten any of my accounts "hacked", hacked or stolen.


But really, make it easy on yourself and get the token, it's pocket change (or free if you have a smart phone).

[CrstyCaptin]

If SE would do an IP check this problem would never happen. IP is different than the one played 99.9% of the time, especially if it's logged in from a different country, obviously something is up.

[Millerna]

So don't buy it or your screwed?
Simple enough.
They should of told you from the beginning. "If you don't get this token, you're going to get hacked."
We need pin numbers. When you log to your character, you set a Pin, IE. 6 numbers or so.
Not buy this and that. Luckily, I am on PS3 and not seen no PS3 hacked yet, and I have a token.
I blame the mass RMT sellers that come to us with no end, it's getting friggin' annoying!

Unless that PIN is unique every time you log in (hello security token ..) it won't make any difference.. A key logger will just as happily get that PIN along with the username and password.

PS3 doesn't mean you're safe either. People can still receive a phishing mail, or visit a compromised/fake square enix site where they ask for your username and password.

[Tupsi]

So is it blind love for the game that causes you to make clueless posts or are you simply new to mmos? This is pretty common.

....What? I've been playing MMOs since at least 2001 and have NEVER been randomly flagged as RMT or anything.

[Dreamer]

How did they get past your security token?

[Aegis]

GW2, has IP checker things or whatever. They will E-mail if you not using your own internet, then you confirm it is you.
I mean plenty of options here SE.

XIV has this too. My ISP has a nasty habit of changing my IP periodically. SE blocks my account until I reply to an email and change my password. I think registering a security token negates the need for this so they don't block you based on IP if you have one.

[Tupsi]

How did they get past your security token?

The only way to do this is session hijacking, which pretty much means you get specifically targeted.

[OrganizationXIll]

if u have a token from CE it dont required a smart phone by just register on the digit behind the token

I did and I press the button and it gives me a nice little code. I put it in the one time password blank when logging in and it says "invalid password". Everytime. I get my family to check behind me as I press each each key and they agree it doesn't work. It requires a smartphone too I assume. The app connects with SE servers and sets the one time password for you.

My question if it did work: If it did work... how does it? The little keyfob you press the button on doesn't connect with SE in anyway. You just press the button and it gives a code. If this is the case they servers must have all the codes in a bank and in that case how is it secure? You, in theory, could just use the code it gives you and use it with any other account that also uses the token? I'm glad it doesn't work like that.