Thank you SE for adding Google Auth support

[Krojack]

I now feel even more secure being able to use the Google Auth (or compatible app) rather than your own one time password app. This means I can have the one time password on my primary phone, on a second device that sits on my computer desk 24/7 AND I can backup my codes incase I need to restore it to another device later. I no longer have to deal with using the emergency removal code. It's literally a last means effort to get back into my account now.

Now if only you could add an optional "remember me" for the PC login so I don't even have to enter my password each time I want to play the game.

[Valkyrie_Lenneth]

I now feel even more secure being able to use the Google Auth (or compatible app) rather than your own one time password app. This means I can have the one time password on my primary phone, on a second device that sits on my computer desk 24/7 AND I can backup my codes incase I need to restore it to another device later. I no longer have to deal with using the emergency removal code. It's literally a last means effort to get back into my account now.

Now if only you could add an optional "remember me" for the PC login so I don't even have to enter my password each time I want to play the game.

Hooray added security! Now let me disable it.

It's not 2fa if you can disable it. Not really anyway.


Besides, it takes like, 5 seconds to log in.


Also, definitely recommend using something other than Googles. Not because it's bad, but because it's tied to your Google account. And if anything ever happens to that, poof.


I've never understood the complaint of having to log in every time. It doesn't take that long. I've had the physical token since 2010 and never felt the need to use the digital one. Push button type code play

[Krojack]

Hooray added security! Now let me disable it.

It's not 2fa if you can disable it. Not really anyway.

I never disabled it.

Also, definitely recommend using something other than Googles. Not because it's bad, but because it's tied to your Google account. And if anything ever happens to that, poof.

100% false. Google wrote the code and made it open source. The app I use that stores all my codes doesn't even have access to the Internet. It's not even coded into the app to use the Internet. Also the app is open source.

Please learn about a system before making claims about it.

[Valkyrie_Lenneth]

I never disabled it.




100% false. Google wrote the code and made it open source. The app I use that stores all my codes doesn't even have access to the Internet. It's not even coded into the app to use the Internet. Also the app is open source.

Please learn about a system before making claims about it.

I didn't say the app you use, I said the Google token specifically.

And not requiring it on login is basically disabling it.

I see most people recommending Authy.

[Krojack]

I didn't say the app you use, I said the Google token specifically.

What does that even mean? Again using this on your FF14 account in no way links it to your Google account at all.

SE generates a unique code that's linked to your FF14 account. You input that code into the authenticator app of your choice. BAM you're done. Google is no where in the loop.

I've literally implemented this system into my own personal web sites and my companies administrative systems.

Here, go read how TOTP works. https://tools.ietf.org/html/rfc6238

And not requiring it on login is basically disabling it.

Take a lesson from other good providers. If I want to remember my login on MY OWN COMPUTER it's not any less secure. The one time password is to prevent people from logging into your account from other locations. I'm pretty sure some hacker isn't going to break into my house to use my computer and get into my FF14 account. Even then the OTP is still needed to log into my mog station account.. I'm referring to the game login. Consoles have the option to remember their passwords so they don't have to enter it every time.

P.S. Having to manually enter your password every time on your PC is a bigger security risk than remembering your login. Those that don't have the OTP on their accounts are more likely to get hacked this way if they get a rootkit virus on their PC.

[Valkyrie_Lenneth]

What does that even mean? Again using this on your FF14 account in no way links it to your Google account at all.

SE generates a unique code that's linked to your FF14 account. You input that code into the authenticator app of your choice. BAM you're done. Google is no where in the loop.

I've literally implemented this system into my own personal web sites and my companies administrative systems.

Here, go read how TOTP works. https://tools.ietf.org/html/rfc6238



Take a lesson from other good providers. If I want to remember my login on MY OWN COMPUTER it's not any less secure. The one time password is to prevent people from logging into your account from other locations. I'm pretty sure some hacker isn't going to break into my house to use my computer and get into my FF14 account. Even then the OTP is still needed to log into my mog station account.. I'm referring to the game login. Consoles have the option to remember their passwords so they don't have to enter it every time.

P.S. Having to manually enter your password every time on your PC is a bigger security risk than remembering your login. Those that don't have the OTP on their accounts are more likely to get hacked this way if they get a rootkit virus on their PC.

If you use the Google authenticator app. The common one people will use seeing that it's easily available and has Google in the name, the app is tied to your Google account. (people commonly call otp applications "tokens")

If you then use that app as your XIV authenticator, and you lose access to your Google account, you lose access to XIV unless going through support of course.

I don't think you were reading what I was saying, only what you thought I was saying.


And if you have a rootkit, your XIV login is the least of your worries at that point.


I know what totp is. I was mostly just making a comment for people reading to be careful with the Google app.

It's a common issue if you read Google Auth app reviews.

[Krojack]

If you use the Google authenticator app. The common one people will use seeing that it's easily available and has Google in the name, the app is tied to your Google account.

Again NO IT DOESN'T. It doesn't link to your Google account at all. You CAN add OTP to your Google account but the app does not sync anything to your Google Account. It is not linked to your Google Account in any way.

You don't even need a Google account to use the Google Authenticator app. You can side load it on your phone. There is even one on the Apple store.

Please stop spreading misinformation and scaring people.

[Valkyrie_Lenneth]

Again NO IT DOESN'T. It doesn't link to your Google account at all. You CAN add OTP to your Google account but the app does not sync anything to your Google Account. It is not linked to your Google Account in any way.

You don't even need a Google account to use the Google Authenticator app. You can side load it on your phone. There is even one on the Apple store.

Please stop spreading misinformation and scaring people.

OK, I'll just ignore the Google app reviews then. Clearly you know more than me.

[Krojack]

You could always, you know, install it and see for yourself.

Either way I still don't use it mainly because of other lacking UI features.

[Doozer]

Imagine seeing a thread thanking SE for adding extra security support and using it as an opportunity to talk down to or argue with someone. These forums are really something.