A solution against battling hackers

[gintoki88]

you can use ur phone eh? ill check it out once this is fixed

how exactly did you not know about the phone app? its only been posted under every topic regarding Security and Authenticators, both here on the forums and on the news articles in the loadstone and the launcher.

http://na.finalfantasyxiv.com/lodest...b0d7f0b23b3aa1

http://na.finalfantasyxiv.com/lodest...41eaefc2aeef7b

http://na.finalfantasyxiv.com/lodest...004b15d14792c8

http://na.finalfantasyxiv.com/lodest...33498e43afd6f4

All these articles and more appeared on the Launcher and loadstone, some of them even in big bold red letters saying IMPORTANT.

I don't know if this is your first mmo, but most out there have Authenticators, both phone apps and physical, and its common knowledge to get one or the other setted up when you create your account, otherwise it will be prone to hackers.

Not having a authenticator is like not putting a lock on your front door of your house.

Sure you can get in by using the password/turning the door knob but so can everyone else if they know where to look.

[Sove92]

Why in the world would you let another ip access my account SE? damn......

You seem to have no idea how consumer IP addresses are assigned.

They change.

[quad01man]

Look, you guys seem to not know how other major companies have account security. With steam, blizzard AND rift, whenever you log in to the account from another machine the account is on lockdown IMMEDIATELY and requests verification. Once again ill say that I should NOT have to buy or use an authenticator if SE would just use precautions that have been implemented years ago. This is the responsibility of the company to ensure security first and foremost. Now I will still do the phone app, but I do not appreciate posts from ppl who tell me its my fault that I was hacked. Its rude and untrue.

[kaiyouske]

How about try and resolve the problem in 2 days instead of 2+ weeks? Just sayin'....

[Freyar]

Look, you guys seem to not know how other major companies have account security. With steam, blizzard AND rift, whenever you log in to the account from another machine the account is on lockdown IMMEDIATELY and requests verification.

Nope. Steam does not lock down the account if you log in from a different IP address. You may have BILLING problems if you change countries, and you may end up with some games locked (this is most notable in Germany and Australia), but they won't lock the account.

That said, Blizzard and Trion do to differing extents. Blizzard will force you to reset your password. Trion will let you play, but not let you earn or spend currency.

Once again ill say that I should NOT have to buy or use an authenticator if SE would just use precautions that have been implemented years ago. This is the responsibility of the company to ensure security first and foremost. Now I will still do the phone app, but I do not appreciate posts from ppl who tell me its my fault that I was hacked. Its rude and untrue.

You were likely phished, or used a password from a compromised system. A good chunk of those are a result of reused or non-unique passwords. I find that a lot of complaints like these stem from an unsecured e-mail or game account and rather than taking a long hard look at their own security on their own systems and accounts, they just try to blame the company behind it.

If someone takes your username and password, and uses that to get access to the account, that is YOUR issue because it is YOUR responsibility to keep it confidential. There are cases where people can get into accounts they shouldn't (Path of Exile had a duplicated session ID bug that has since been fixed), but those are rare in comparison.

You don't have to buy an autheticator/token. A phone is an optional free alternative. I will always recommend buying a token though as they last for years and if your phone is ever reformatted or reset you won't lose access to the account. SE's tokens are strangely expensive compared to others, but I'm willing to pay it since it means I've got that extra layer on top of my unique complex password.

That's not to say that SE's customer support for EU/NA is acceptable. Twenty days to sort out an autheticator issue for a Free Company member is ridiculous, especially when turning around and telling him that because of their failure to provide support, they can't reimburse the time he's paid for. A week at most. Seven days, I can understand that, but not twenty days.

[darkvision]

i had formated my phone and forgot to remove software token from my account, contacted live chat and got it resolved in mater of mins be never had my account hacked, i been using OTP since FFXI

[Freyar]

i had formated my phone and forgot to remove software token from my account, contacted live chat and got it resolved in mater of mins be never had my account hacked, i been using OTP since FFXI

Would be nice if hold times were that quick, but with friends of mine having trouble getting connected to some support agent (be it phone or chat) with waits at 4 hours each for twenty days.. it's a risk.

[Ruprect]

You seem to have no idea how consumer IP addresses are assigned.

They change.

Like once a month if that, I have had mine for months. They should not be letting other IP addresses access accounts. When your IP address changes they should lock your account and send you an unlock password that you have to enter to access the game.

[MithrasInvictus]

Regarding the security tokens, I think of it like this: a locker doesn't come with a lock, but you keep all of your stuff in it. You buy a lock, attach it to the locker, and your things are kept safe against unwanted intrusion for a minimal one-time fee.

[wolfsspirit]

Add a security token, that's all the security you'll need.

And is annoying as hell with disconnections.. everytime i need to add my password + the token code , and not only for the game but for mog station , lodestone and anything that's SE.
I would want an option where u can set security by adding your IP , it be fine if it gets locked when you change your ip , and unlocked when you confirmed your (new) ip using the token