A question about security tokens

[Niwashi]

If you activate a security token on your account so it requires the one-time passwords, what happens if you lose it? It seems as though if it were possible to reset the account without the token, it would remain as susceptible to hacking as it was in the first place without a token. On the other hand, if it's not possible, then once you lose the token, you'd be permanently locked out of the game. So I'm trying to figure out just how these end up being any safer than the hacking danger they're supposed to prevent.

The last MMO I got this deeply into (LOTRO) I played pretty heavily for over 6 years until this one came out to pull most of my attention away from it, and I still go back to that one often enough that I'd be devastated if I suddenly lost access to it now after more than 7 years. When I really get into a game, I expect to be able to play it for a decade or more. I'm not confident that I can keep track of that little token through a timeframe like that. Is it safe to activate one?

[AllOutWar]

This is a good question and is one of the reasons I don't have one. The other reason is because I used one in WOW and it was so annoying to have to check my phone every time I wanted to log in. I'm pretty sure you can download the app version and run some sort of emulator on your PC to use the application. Of course this only would work for the app version and not the actual token. But even if you did that if your computer crashed you would be locked out as well.

I could only assume that they thought of this already and would most likely be able to reset your account after providing them with your secret question answers but I can't confirm that.

[Noshpan]

They do provide a rather lengthy password for in case of emergency removal of the token. Which is handy to have for those moments for just in case that you use it. I have my emergency removal password copied elsewhere for just in case something happens and I lose my phone (I have the smart phone version of the token). I'm not sure how the emergency removal password works, as I've never tested it out.

[ispano]

For the phone app there's a removal code given when you set it up, but not for the physical token. Typically if you lose the token, you have to prove you're the owner of the account by providing the information that's on it, such as SQ answers and such. IE keep a record of all that since many people like to put BS info, or they move and never change it, etc.

[Narissa]

You'd most likely need to contact support and give them photographic proof of who you are to get it removed, just like WoW

[Valmar]

Q: If you activate a security token on your account so it requires the one-time passwords, what happens if you lose it?

A: The Smartest bet here is do not get the little key chain. Use one of the Smart phone apps. If you lose or break your phone, sell it, etc, you can use the Emergency Removal Password SE gives to you, to remove the 1 time password from your account. its a 20 digit Alpha-Numerical, Case Sensitive password. write it down, and copy it to a Word Doc on your PC.

Q: It seems as though if it were possible to reset the account without the token, would it remain as susceptible to hacking as it was in the first place without a token?

A: To access the Emergency Removal Password you must log on your account with the 1 Time Password. So once you have everything all set up, Log on and write it down, like I alrdy stated. If you forget to write it down, lose it, or copy it down wrong, you will need to call customer support. Answer a few questions, and if everything checks out, they can remove your 1 time password. takes no more than 15mins over the phone.

The only way someone can steal your account when you are using a one-time password is if they Impersonate you and call customer support.
They would need to know your Full Name, Address Registered to the account, Credit Card Number, Birthday, Account Name, All the answers to your Secret Questions (Customer Support asks one SQ at random)

So like everyone has been told time and time again by everyone.

Keep your personal Information to yourself. Never Share your password with anyone.

[MurakumoMillennium]

The other reason is because I used one in WOW and it was so annoying to have to check my phone every time I wanted to log in.

WoW does NOT require a 1 time password every time you log in, unless you either log in from a different IP address or you didn't log on for a set number of days. Which was great, because it meant putting it in like once a month at best. I wish they'd do the same thing here tbh.

[DoctorPepper]

They do provide a rather lengthy password for in case of emergency removal of the token. Which is handy to have for those moments for just in case that you use it. I have my emergency removal password copied elsewhere for just in case something happens and I lose my phone (I have the smart phone version of the token). I'm not sure how the emergency removal password works, as I've never tested it out.

This is only available for the phone security token. I have the token that I purchased directly from SE for FFXI and the emergency password is not an available option for it. I'm pretty sure that is what the OP is talking about. I'm also curious about this because I've been worried lately that my token's battery might die since I've been using it for like 7 or 8 years now.

[Tiggy]

This is only available for the phone security token. I have the token that I purchased directly from SE for FFXI and the emergency password is not an available option for it. I'm pretty sure that is what the OP is talking about. I'm also curious about this because I've been worried lately that my token's battery might die since I've been using it for like 7 or 8 years now.

You don't get the emergency removal code from the app. You log in to the mog station and get it there. It's app or keychain agnostic.

[Noshpan]

WoW does NOT require a 1 time password every time you log in, unless you either log in from a different IP address or you didn't log on for a set number of days. Which was great, because it meant putting it in like once a month at best. I wish they'd do the same thing here tbh.

Actually, you can set up your WoW (or Battle.net) account to ask for a one time password every time you log in.