FYI: check and change login passwords ASAP

[VelKallor]

https://eu.finalfantasyxiv.com/lodes...afd7028035bce5

We are currently experiencing an attack by a third party that is attempting to gain access to the Square Enix Account Management System by using a combination of email addresses and passwords that appear to have been obtained from other online services of other companies.

Using the same email address and password combination for your Square Enix account as you do for other online services increases the possibility of a third party gaining unauthorized access to your Square Enix account.

Furthermore, even if your email address and password combination is not identical to those used for other services, there is still a high risk of your account being compromised if your password contains easily discernible patterns or sequences of characters, such as your date of birth.

Should you happen to be using the same email address and password combination on your Square Enix account as you do for another service, or if you are using a password that can be easily guessed, we strongly recommend changing your password immediately.

I seriously recommend you check your security settings, and if you havent changed your passwords recently, do so.

If you dont have a one time password setup, it might be a good idea to get that done.

One-Time Passwords are temporary verifications which authenticate a user for a single login, making them highly effective against spyware such as keyloggers. We strongly recommend the use of One-Time Passwords in conjunction with your login ID and password for increased security against unauthorized access. A free software token app is available for smartphones (iPhone and Android)

and lastly, in regards to this

Should we continue to experience rising numbers of unauthorized access attempts, a password reset for all Square Enix accounts may be initiated.

Over to you.

[Jojoya]

A mandatory password reset for all accounts would probably be a good thing regardless. People tend to be careless with passwords. It's about 3 minutes of inconvenience to help improve security.

[ryouma17]

i bought the physical authenticator token many years ago, no idea why anyone would not use one

[VelKallor]

Mine is done and I have the auth setup as well.

I dont know if anyone here is aware, but one of our major telcos, Optus, was hacked and a huge amount of personal info was compromised.

Wont try and tell you what to do, but I STRONGLY advise you to go check your pw details and if needed, change them. Better a few minutes now, than a huge hassle later.

[dspguy]

If you dont have a one time password setup, it might be a good idea to get that done.

If you don't have a one time password setup, you need your head examined.

Seriously.

Account theft in online games was rampant in the 00s (EQ, WoW, EQ2, FFXI, LOTRO, etc). There's a reason OTP-protected accounts aren't stolen. It works. Unless you provide someone your OTP (when you clearly shouldn't), it simply won't happen.

Considering the time players put into their accounts, I don't care what the reason is that they choose not to use the OTP. Any reason to lose your account by not protecting it simply is invalid.

[Lelila38]

If only SE would finally send me my new security token I ordered like a month ago, since mine ran out of juice.

[Mika_Zahard]

i bought the physical authenticator token many years ago, no idea why anyone would not use one

Because not everyone else can access those, as we're not from the US/EU?

[Canadane]

If only SE would finally send me my new security token I ordered like a month ago, since mine ran out of juice.

There's the SE OTP app, but you can also use third party autenticators now too.
The physical keychain is nice though. But all my XI friends are currently in the process of losing their battery power finally.

[AngelCheese77]

Keep in mind, the picture below is what the REAL log in to the Lodestone looks like https://na.finalfantasyxiv.com/lodestone/

FAKE SITES will have jibberish letters like .xya inserted and the OTP on the same page as your name login and password.

[Kranel_San]

Glory be to the OTP! \o/