Curse

Marvel-Kid · May 22, 2009, 11:26 PM // 23:26

Ok, here's my idea...

If GW had 1 password in the beginning and 1 b4 you create/delete/play a character accounts wouldn't ever...EVER be hacked + stolen. I was furious when my lil bro's acc got stolen. This is when I had the idea. Anyone else have the same thoughts?

/sign !!!

Demonlord Matt · May 23, 2009, 12:26 AM // 00:26

so one extra password to stop hackers? it might work but im not that sure about it. It would make hackers exert a bit more energy tho

Raudic · May 23, 2009, 12:33 AM // 00:33

meh it just be a pain. im not sure if it would help too much but whatever

/sign

Empress Amarox · May 23, 2009, 12:37 AM // 00:37

Better idea: http://www.blizzard.com/us/press/080626-auth.html

russiansteven · May 23, 2009, 12:38 AM // 00:38

I think its a great idea!

/Sign

Skye Marin · May 23, 2009, 12:39 AM // 00:39

Why not just make your current password twice as long?

**Marty Silverblade** · May 23, 2009, 12:41 AM // 00:41

Depends on what actually happened. If you downloaded something dodgy, get better security/don't download dodgy things. If you got a virus/hacked or something, get better security. Tbh, if the solution to your was as simple as upgrading security, then I don't particularly want to have to put in two passwords, especially when I swap chars alot to swap stuff around.

/notsigned unless there was a good reason.

Gift3d · May 23, 2009, 12:56 AM // 00:56

How about

just make a secure email/pass

then don't be dumb about it and go and get yourself hax0red?

HawkofStorms · May 23, 2009, 01:12 AM // 01:12

/notsigned
A lot of people won't even be able to remember a 2nd password, especially one that you might only need to use once a year.

Zodiac Meteor · May 23, 2009, 01:16 AM // 01:16

/not signed because doesn't work.

Sorry, key loggers and spyware will get every password, you could have 10,000 different passwords and as long as you type it in. Hackers get it.

poasiods · May 23, 2009, 01:17 AM // 01:17

Make it optional...

Zodiac Meteor · May 23, 2009, 01:25 AM // 01:25

Quote:

Originally Posted by poasiods

Make it optional...

It doesn't work. No matter how long a password is or how many you have. A common keylogger will steal it.

The reason to have difficult to guess passwords is, you guess it, difficult to guess, if you are in a public place, have a friend over or simply don't trust your brother. Make it difficult.

Arkantos · May 23, 2009, 05:12 AM // 05:12

If someone can get your first password, they can most likely get your second.

Be more careful. Make a strong, brave password.

Hailey Anne · May 23, 2009, 06:43 AM // 06:43

/notsigned. I dont even like entering my 1st pw.
Learn to make stonger passwords and stop downloading the porn.

Dacomos · May 23, 2009, 07:35 AM // 07:35

As Arkantos said, if you got a keylogger, it doesnt matter how many passwords you use.

I think the best idea is:
1 password for normal gameplay.
Second password for password change, account editing and character deletation. You dont have to type second password often, so there is lesser propability that keylogger catch it.

/signed if you consider my idea ;]

@Edit. There is a nice security key in Tibia. Its called recovery key.
You get it when you create account and you have to write it down on a paper.
If your account is stolen, and hacker changed password and email adress, you can use recovery key to set new password and email adress in 1 second ;p

Arduin · May 23, 2009, 07:50 AM // 07:50

If only Anet would introduce some DNA identification.

...

I know about a suggestion about locking characters for a given period of time. That would at least keep the character safe.

pumpkin pie · May 23, 2009, 10:13 AM // 10:13

/signed and add - second password should comes with an online screen keyboard that scramble its keys everytime you click on it.

s t e e · May 23, 2009, 12:32 PM // 12:32

I do believe something needs to be changed. I think the idea Blizzard had would be good.

/signed

Operative 14 · May 24, 2009, 02:17 AM // 02:17

I think more account security is in order, but I don't think this is the way to do it. Chances are, as others have pointed out, if someone gets your first password, they'll get your second as well.

Though if you modified the idea slightly, it might work. They could check your IP address. I think most of us usually play GW on one computer most of the time (I know I do) so if you have a 'home' IP address saved, you enter as normal. If you try to use the account from an alternate IP address, you have to enter the second password (that must be different from your main password) you created along with your account. That way, if you're at home, everythings fine and dandy. And unless the hacker is a friend or someone in your family that can access your computer (in which case your kind of screwed no matter what happens), they'd have to find out what your oft unused password is.

You could even expand on that idea and set up a list of IP addresses that are allowed to access your account (like your home desktop, your laptop, etc.) and make it so you never have to use the alternate password except for extreme cases. Then that way there's nothing that keyloggers or spyware can find, and they'd be locked out because they couldn't match your IP address, and they'd have no way of finding out about your secondary password because you never use it. And of course make there be an entry cutoff so you can't brute force your way in, either.

headlesshobbs · May 24, 2009, 03:48 AM // 03:48

Account keys.

Even when you have 2 passwords, you should always have them handy. Plus I think in the case your account does get hijacked, you can give them to support and they'll let you reset the passwords for you.