Quote Originally Posted by Ziyyigo-Tipyigo View Post
The phone that is able to download an app is by definition online and therefore can be hacked/compromised/etc. Your keychain can't.

Never underestimate the security of an air gap.
If its just an authenticator app they use it has no connection to your SE account except the OTP which changes every 30s, they have one part of the puzzle of hacking your account if they gained access to your phone.

They would need to find out what PC you access FFXIV from, then put a keylogger on it for your SE id and pass, then hack your phone for the OTP, the likely hood of getting access to all both of these devices is unlikely.

If RMT (usual account hackers) wanted to go through this they would be completly blind, they would have to hack every smartphone until they find an FFXIV app, but a OTP is usless without the user id and pass.

Someone also said that smartphones are mor vulnerable to attack because of lack of security, but smartphones have alot of security software available, and atleast android has protection in the framework in that if an app doesn't have permission to access certain features it cannot, example if the FFXIV app doesn't need network access it can never be manipulated to access the internet.