How important is the security token? Because it's annoying to use.

[Crushbone-Hammerfist]

I play exclusively on PS4, I don't have a PC account (which I imagine would be a lot easier to steal). My FFXIV account is tied to my PSN account, is it not? So for someone who has my FFXIV password it won't do them any good if they don't have my PSN account, unless they want to log into my mog station and change credit card information.

I ask because keeping track of my little red button is becoming frustrating with two kids in the house who love little red buttons. Does it offer some amazing security I'm just not getting otherwise, or is the fact that my account is only PS4-accessible enough to deter would-be thieves? Also connecting from upstairs using Remote Play sucks if I forget to bring the token upstairs.

I use different passwords on both my PSN account and my FFXIV account, before anyone asks.

As an alternative, how does the smartphone app compare in terms of security? I always have my phone with me.

[Gerolan]

Well if your account for whatever reason gets hacked and you lose everything you gained in game, I'd imagine you would be screaming "why didn't I use the token" it's very important, also free teleport for using it

[PixelPirate]

Apart from the fact that it's almost a 100% fool proof way to secure your account, it also allows you to set one free teleport point. If those two things aren't worth keeping track of your number generator then it's not for you. There is an app for it, which I suppose can be hacked. However, I find it unlikely that anybody would go through the trouble of stealing/hacking a phone for the purpose of targeting your FFXIV account. So I'd say the phone app is just as secure as the key fob.

[Magis]

Apart from the fact that it's almost a 100% fool proof way to secure your account, it also allows you to set one free teleport point. If those two things aren't worth keeping track of your number generator then it's not for you. There is an app for it, which I suppose can be hacked. However, I find it unlikely that anybody would go through the trouble of stealing/hacking a phone for the purpose of targeting your FFXIV account. So I'd say the phone app is just as secure as the key fob.

Almost. It was realized in the early days that a program could sniff out your session id (which doesn't need any elevated privileges, and you can use Windows Event Logger to see it in action) that is sent from the FFXIV launcher to the FFXIV game itself, and causes a login w/o needing any credentials (email, pw, or one-time pw). Nothing is full proof. This is why a firewall, virus scanners, and malware scanners are important.

[Bixby]

As an alternative, how does the smartphone app compare in terms of security? I always have my phone with me.

Equivalent. I've got two physical tokens I could be using. I switched to the app as soon as it became available.

[Freyar]

Put the token with your keys? I always end up with mine in my pocket as a result. I hate authenticators on phones for a couple of reasons.

First: Your phone is already a high-value item that is prone to theft. Why would you want to add to that value?
Second: There is a likelihood of your phone having to be factory reset, or the app removed in some form or another down the line which invalidates the sync.

[Saziel]

Put the token with your keys? I always end up with mine in my pocket as a result. I hate authenticators on phones for a couple of reasons.

First: Your phone is already a high-value item that is prone to theft. Why would you want to add to that value?
Second: There is a likelihood of your phone having to be factory reset, or the app removed in some form or another down the line which invalidates the sync.

The first part, sure, but the second part is easily solved when you initially set it up and write down your emergency removal code.

[kidvideo]

Yeah, I'm on a PS4 also & wish the game would auto log me in at start up, just like every other online multiplayer game. No one is hacking my psn account & no one is hacking the other online games.

[Shaone]

No one is hacking my psn account & no one is hacking the other online games.

Yep, I would completely trust Sony, they have such a reputation for maintaining the security of the PSN, and would never let the data for millions of accounts with personal information and credit card details be hackackachBWAHAHAHAHAHA AHAHAHA AHAAAHAAA .

[Rhas]

Yep, I would completely trust Sony, they have such a reputation for maintaining the security of the PSN, and would never let the data for millions of accounts with personal information and credit card details be hackackachBWAHAHAHAHAHA AHAHAHA AHAAAHAAA .

You know XB Live has been hacked many times too. It isn't just Sony and PSN. They are all vulnerable.