I want to suggest some changes. But first, a little rant about why:
---------------------------------
Every day, my IP resets. That means, every day, to start playing, I have to do a few annoying extra steps which normally aren't bugging people:
- After typing in the password, I get notified that something is wrong so I have to dismiss the message.
- Type the password again to get the authenticatior prompt
- Alt-tab out of the game, load my email, find the new message, load it and copy the code.
- Paste the code in and confirm the prompt
Every 30 days, it's not an issue. But it happens every time I'm tired of the day already and just want to log in and play.
---------------------------------
Some things that are always constant for me. If some of these can be used to create a footprint for the authenticator not to pester me, that'd be great.
I always play from the same location and the same hardware. Nobody else has access to this PC.
My IP always ends up being 93.X.X.X or 83.X.X.X.
The game installation is always the same. Some old 3.3.5 I used over a decade ago. Even the settings and addons are changed rarely.
I use 2 browsers, but I'm not changing their configurations.
Alternatively, I'd like to disable IP and/or location checks. Even if that meant having it prompt for auth weekly instead of monthly.
-
Member
Every day 2 Step Authentication is annoying. Please, change how strict it is.
-
Member
this is true. We werent informed it was irreversible proces. Now we stuck in security limbo. Pls disable
-
Forum Veteran
Switch to 2FA app for more comfortable (and faster) use.
-
Member
I made this topic trying to keep the authenticator active. I've had to deal with account recovery before (not here though). If you want to disable it, here's a quote from the FAQ (hadn't tried it myself, please let us know how it goes):
How do I remove or change my 2 step authentication method?
- Simply visit the settings page located in your account panel and select a new method
- Alternatively, log out of your account and visit the Retrieve Page
- Complete the process on the Retrieve page to remove 2 Step Authentication
About 3 reasons for not using it aside, it would still require extra steps every day. Hand movements would be for the cellphone instead with keyboard and mouse. And the time from double-clicking the icon to character selection would definitely not be faster... Unless you keep your cellphone right next to your mouse.
-
Moderator
It isn't strict at all, by any stretch. For whatever reason your IP changes daily, something that is wildly unusual and unnecessary, and that bizarre behavior causes you to have to re-authenticate every time, but your personal minor inconvenience is hardly a reason to change the whole system and make it less secure.
For the other person posting, it can't be disabled. It was activated on every account by us months ago, when we made it mandatory.
-
Member
As far as I know most home networks have a Dynamic IP address.
Would it be possible that 2 step auth checks the range IP address instead?
-
Moderator
Further than you know, the most common lease duration for a dynamic IP is seven days, some shorter and some even longer.
Checking an IP range would already mean compromising the security the measure is meant to give.
-
Member
Everyone I know and talk to has their IP reset once a day, usually sometime between 1a.m. and 5a.m.
Every attempt on stealing one of my accounts so far has been from another country.
Compromising the IP to a range given for the whole country is a risk I'd be willing to take. Some checkmarks in settings to customize how authenticator behaves would be great.
-
Moderator
It isn't one the Administration is willing to take, though. Creating an exception will just bring back the problems this was enforced to solve. Everyone is 100% sure their account is secure - including the thousands who get their accounts stolen.
Quote
