A solution against battling hackers

[necrosis]

I should not have to purchase a security token after purchasing both the game and subscription.

We should not have to do a lot of things but we do them for security.

Bet you bitched when you had to put locks on your front door.

[Ruprect]

We should not have to do a lot of things but we do them for security.

Bet you bitched when you had to put locks on your front door.

The front door is not a fun game. RL != fantasy. I am afraid for some of you kids not getting that. Not putting locks on the front door could = death/loss of real items. Getting hacked in a video game could = loss of virtual items/virtual currency or not able to play for a while. There is a very clear distinction here and unfortunately there are far too many people that do not understand the difference.

[Cirsce]

My account was hacked today, and am now dealing with the account suspension issue and am in queue for live support... yippeee... I have a recommendation though, which is the ip adress check. Steam and blizzard and even trion use a system where if your account is logged in from another ip, it will become locked in case of hackers. This may not be a fool-proof or perfect security system, however im sure it will most certainly help considering this game seems to have NO security features implemented.

Why in the world would you let another ip access my account SE? damn......

I heard after 1.0 they dropped the ip address check, no clue why. Granted there's still ways around an ip address check, but the more annoying you make it for people the better.

[squidbunny]

Although I agree there's no reason not to add the software token IF you have a smartphone (and don't assume everyone does), there's also no reason for SE not to have basic things in place like an IP check. And there's no reason for their appalling support regardless of whom the blame for a compromised account rests with: if they're unwilling to offer decent support to users without security tokens they should just straight up not allow anyone without a mobile device or unwilling to pay for a hardware token to play the game.

I agree about charging a lower sub for folks with a software token; I also think if the game requires a token it should be free with purchase (i.e. a physical authenticator should be included because, as I said, not everyone has a mobile device.)

My account is safe (for now), I'm using the software token successfully (for now), but I feel for anyone dealing with a suspended account. I am a longtime MMORPG player and I have never seen a thundercloud of botched RMT handling quite like this.

[Sove92]

Why in the world would you let another ip access my account SE? damn......

You seem to have no idea how consumer IP addresses are assigned.

They change.

[Ruprect]

You seem to have no idea how consumer IP addresses are assigned.

They change.

Like once a month if that, I have had mine for months. They should not be letting other IP addresses access accounts. When your IP address changes they should lock your account and send you an unlock password that you have to enter to access the game.

[quad01man]

Look, you guys seem to not know how other major companies have account security. With steam, blizzard AND rift, whenever you log in to the account from another machine the account is on lockdown IMMEDIATELY and requests verification. Once again ill say that I should NOT have to buy or use an authenticator if SE would just use precautions that have been implemented years ago. This is the responsibility of the company to ensure security first and foremost. Now I will still do the phone app, but I do not appreciate posts from ppl who tell me its my fault that I was hacked. Its rude and untrue.

[Freyar]

Look, you guys seem to not know how other major companies have account security. With steam, blizzard AND rift, whenever you log in to the account from another machine the account is on lockdown IMMEDIATELY and requests verification.

Nope. Steam does not lock down the account if you log in from a different IP address. You may have BILLING problems if you change countries, and you may end up with some games locked (this is most notable in Germany and Australia), but they won't lock the account.

That said, Blizzard and Trion do to differing extents. Blizzard will force you to reset your password. Trion will let you play, but not let you earn or spend currency.

Once again ill say that I should NOT have to buy or use an authenticator if SE would just use precautions that have been implemented years ago. This is the responsibility of the company to ensure security first and foremost. Now I will still do the phone app, but I do not appreciate posts from ppl who tell me its my fault that I was hacked. Its rude and untrue.

You were likely phished, or used a password from a compromised system. A good chunk of those are a result of reused or non-unique passwords. I find that a lot of complaints like these stem from an unsecured e-mail or game account and rather than taking a long hard look at their own security on their own systems and accounts, they just try to blame the company behind it.

If someone takes your username and password, and uses that to get access to the account, that is YOUR issue because it is YOUR responsibility to keep it confidential. There are cases where people can get into accounts they shouldn't (Path of Exile had a duplicated session ID bug that has since been fixed), but those are rare in comparison.

You don't have to buy an autheticator/token. A phone is an optional free alternative. I will always recommend buying a token though as they last for years and if your phone is ever reformatted or reset you won't lose access to the account. SE's tokens are strangely expensive compared to others, but I'm willing to pay it since it means I've got that extra layer on top of my unique complex password.

That's not to say that SE's customer support for EU/NA is acceptable. Twenty days to sort out an autheticator issue for a Free Company member is ridiculous, especially when turning around and telling him that because of their failure to provide support, they can't reimburse the time he's paid for. A week at most. Seven days, I can understand that, but not twenty days.

[kaiyouske]

How about try and resolve the problem in 2 days instead of 2+ weeks? Just sayin'....

[darkvision]

i had formated my phone and forgot to remove software token from my account, contacted live chat and got it resolved in mater of mins be never had my account hacked, i been using OTP since FFXI