Quote Originally Posted by Moheeheeko View Post
not if you have an authenticaor.
These do NOT make an account 100% safe. They help, but don't think you can get away with "password" or "1234" and expect your account to be safe.

In fact, at launch they were more or less completely useless as it was discovered that session IDs never expired, which meant somebody could take your account with neither your password nor your token code.