FYI: check and change login passwords ASAP

[AngelCheese77]

Keep in mind, the picture below is what the REAL log in to the Lodestone looks like https://na.finalfantasyxiv.com/lodestone/

FAKE SITES will have jibberish letters like .xya inserted and the OTP on the same page as your name login and password.

[KatieConnr]

Keep in mind, the picture below is what the REAL log in to the Lodestone looks like https://na.finalfantasyxiv.com/lodestone/

FAKE SITES will have jibberish letters like .xya inserted and the OTP on the same page as your name login and password.

Holy tabs Batman!!

[RyuDragnier]

Keep in mind, the picture below is what the REAL log in to the Lodestone looks like https://na.finalfantasyxiv.com/lodestone/

FAKE SITES will have jibberish letters like .xya inserted and the OTP on the same page as your name login and password.

Clear your tabs, you madman.

[Kranel_San]

Glory be to the OTP! \o/

[SaberMaxwell]

Can't recommend password management software enough for something like this too.

[george357]

my long time friend is otp he protects my account from harm.

[Shibi]

This attack is a pretty simple one. It's just plugging in details scraped from other hacks and leaks over the years.

If you use a password manager, and don't reuse your passwords you are as safe as you ever are.

[VelKallor]

If you use a password manager, and don't reuse your passwords you are as safe as you ever are.

Perhaps

Better safe than sorry later, Shibi. Password security is a big deal.

[Aurikai]

Using OTP with FFXIV login is painful, bad enough you need to enter password every time, but OTP also. There's a thing called OAuth that issues security tokens once you pass all authentication checks so you don't need to provide this stuff every time, apparently Blizzard can implement this but not SE. Cumbersome login processes always forces bad security habits by users.

[SaberMaxwell]

Using OTP with FFXIV login is painful, bad enough you need to enter password every time, but OTP also. There's a thing called OAuth that issues security tokens once you pass all authentication checks so you don't need to provide this stuff every time, apparently Blizzard can implement this but not SE. Cumbersome login processes always forces bad security habits by users.

Convenience and security are ever on opposite sides of a spectrum.