According to this topic: http://forum.warmane.com/showthread.php?t=329592 email two-factor authentication is to be expected within the future.

I wish to state that I truly appreciate the effort you guys are putting into security when it comes to your users, and I understand that it takes quite alot of effort to ensure such systems are reliable for all users.

However, I wish to ask...
Are there still plans to implement email two-factor authentication in-game?

I've personally chosen to use this form of two-factor authentication simply because my Gmail account requires that I use my Google authenticator for foreign account access attempts anyway, on top of having an entirely different password for my Google services. I would much prefer using my email as a two-step authentication over the Google authenticator, itself, personally.

However, I've seen quite alot of gold-seller spamming and trickery (even via the in-game mail system) going on lately, and though I don't feel my account is in jeopardy, personally, I can't help but to feel like this would be a major step forward.

Again, I thank you for your efforts thus far. I've noticed the ability to restore WEBS accounts backups via the website account panel, and I certainly do make backups as often as possible. But, I figured I should ask before I make decisions in the near-future, and I'm sure I'm not the only one with this question.

Thank you for your time. Keep up the good work!