Realms 2FA Broken

[TigOldBitty]

Dear Staff,

Please fix 2FA , you can input any random generated number and it will authenticate on the wow client application ( not tested on website) ..... I tested it numerous times after making a typo from my google authentication and it still let me log in. Surely this is a major security concern.

[Palutena]

If you are already authed with your current IP, any code you input in there will "work".

[TigOldBitty]

Thanks, good to know. Didn't know they linked your public IP to auth process.

[Obnoxious]

Your last authenticated login IP is remembered so you don't need to do it again every time you disconnect or relog (barring cases where your IP was refreshed meanwhile, of course).