Software authenticator, seriously locked to 1 device?

[Kaedan]

No not really. If the same computers on the same IP is logging in it's perfectly fine for it to be occasional.

If it wasn't possible for someone to spoof your device and spoof you IP... which is actually is.

That's why people who set their 2 step identification for "make his device safe for a month" still get their accounts hacked. And then they wonder how they got their account hacked...

[SamSmoot]

The stupid thing is that both my game accounts have an authenticator option, but it's nearly impossible to find a BANK that has this..

[tdb]

If it wasn't possible for someone to spoof your device and spoof you IP... which is actually is.

Spoofing an arbitrary IP for two-way communications is actually really hard. You basically need to have ISP-level (or maybe deeper) access to the Internet backbone so you can alter routing tables and have the traffic directed to you instead of the rightful holder of the IP.

Many ISPs give dynamic IP addresses to their clients, so if you're using the same ISP and are geographically reasonably close to your target (so as to be in the same address pool) it's possible to get the same address they used previously. However it's still damn near impossible to get just the right address at just the right time to take over the target's game account.