Originally Posted by
Edifice
We have moved away from our own captcha system in favor of the new "invisible" recaptcha system.
This is invoked on all things account-access or account-retrieval now, for example the captcha would only come up if you failed one login previously, it is every login now, regardless of fails or successes, to further prevent bots or bruteforcing.
On top of that, we now check for two factor authentication and the date two factor authentication was added on every item trade addition, character trade addition and sending gifts.
Due to the amount of account compromising going on, leaked databases, people buying gold / using 3rd party websites and being scammed/phished, we now require that players have TFA enabled for atleast 3 days before allowing them to use such services.
Lastly, we have updated our policies to reflect assistance provided for those with TFA enabled/disabled, or "half enabled", support is becoming very limited if players are not proactively protecting their information or accounts.
