So I was hacked... my observation so far and tip.

[Lunavi]

Your FF14 account isn't a government agency, or a nuclear weapons facility - you don't have Mossad or the CIA or some black hat hacker collective trying to steal your gil. It'll be a low budget quasi-illegal RMT organisation using a simply dragnet of techniques - phishing e-mails, trojans, dictionary attacks - and seeing what bites.

Your reasoning is akin to saying that a grocery store robbery might be conducted with a nuclear bomb; afterall such devices exist. But the reality is that organisations who own nuclear weapons usually have bigger plans than holding up a grocery store...

Who knows, he maybe has like 1,000,000,000,000,000,000,000,000,000,000,000,000k gil on his account... That is alot of IRL money and I would not like to lose those...

[Cyrus-Wallace]

I think the app is free but the token service cost money is it?

Nope, it's all free! You download it, register it and you can use it! =) It doesn't take much time and it will keep your account safe. And for the people without smartphones, you can download Bluestacks to your computer, download the APP from there and use it the same way.

[Rekujen]

I just wan't to know why the e-mail I sent to Square-Enix Support isn't showing up in the support page.. there's no ticket history.

[Ronyx]

I'm really sorry to hear you had to pass through this. Your story seems possible, something similar happened to me back in FFXI with the difference that I was online at the moment I got hacked. I was at Sea Serpent Grotto hunting the NM for Joyeuse and all of a sudden I got disconnected. I was in a party with a friend and he sent me a message through MSN asking me why I disband the party and warp out. I told him that I just got disconnected and I couldnt get back online. He contact a GM and my account got blocked until the investigation protocol.

Back then I had to make some phone calls to the support center, sign some papers and proof that the account was mine. It took a while but I got my account back and rolled backed since they took my items and my money. After that I bought a security token and never again got hack. I still use that same token So good Luck with your case and hopefully you get your account back the way it was.

[render4439]

Another approach would be to use a different email/account name for each service. That would throw hackers off strongly.. even if they have your password, they're not going to try every password they have with every email/username they have. If your username is different its quite useless to them even if they have your password.

[Alhanelem]

1) If you have a really secure password (numbers, upper case, lowercase, *and* special characters, no common words, more characters the better) the chances of you getting hacked are incredibly small. Like incredibly small.

Unless you're using special characters that you have to paste in, no normal password is safe against a key / click logger. The authenticators work in this case as long as you log in right away, because once you log in, that password no longer works and is useless to the person tracking you.

Authenticators are not 100% bulletproof, but they drastically improve security, especially for users who are less secure in other areas.

[gigi_frana]

What options are there for getting an authenticator? (win7 user here)

[Arcaloid]

Nope, it's all free! You download it, register it and you can use it! =) It doesn't take much time and it will keep your account safe. And for the people without smartphones, you can download Bluestacks to your computer, download the APP from there and use it the same way.

Good to know! I must have mixed up the 'Security Token' and 'Software Token' on their description site. Registered and hope my account won't be hacked in a month again like what happened to me on D3 >.<

[Alhanelem]

What options are there for getting an authenticator? (win7 user here)

Order physical token via SQEX account management (costs money) or download the smartphone app (free). The app can be a bit more of a hassle if you need to upgrade your phone or reset/wipe it, but it's free. The token is probably slightly more secure overall but either one will vastly improve security.