120506-2-step-my-final-words

== Content ==
			
From one of my other posts on the matter, it's now becoming an epidemic and the number one reason stopping players returning to the game!
 
If like most people you changed your phone/pad/pc there is a good chance you never kept the code generated by the original app (or lost it even if you did) keeping the same sim, phone number or IP will have no effect if you install 2-step on the new device, any code generated will be invalid! All you can do now is open a ticket with customer support and join the long list of players with the same problem! There are many posts like it on this and other forums across the internet. Carbine keep sticking up for 2-step but it's broken in a number of ways! The main reason is it does not stop you or anybody else having access to your account, all it does is stop you or others playing the game, you or they can still change your : account name/email/password or buy anything from Carbine/NCSOFT even with 2-step active.....JUST LIKE THE GAME TIME YOU JUST BOUGHT
 
Also while waiting (or giving up) you can't even test the PTR because 2-step locks you out of that too! It protects NOTHING all it does is stop you playing
 
Carbine can we please have some response on the matter ? I've been called a white knight, insulted many times for fighting the good fight all over the internet, my faith in Wildstar is unwavering! But your support for 2-step borders on madness, a product that in no way shape or form protects the players account! All it does is stop a paying customer playing the game....now that can't be right
 	
----
			I think if you had of been here when the huge rush of hacked accounts came into play (note, as far as I am aware, no account that had 2 step authentication enabled was hacked AFTER they had it enabled) you may feel differently. :) The forums were flooded at that time with far more posts than we see these days, and 2 step helped an incredible amount. I would not like to see that happen again. It's no fun losing all of your items and having to wait for support to help you out because you have re-set your phone or lost your code is a small inconvenience in the long term compared to having your account taken over by someone unauthorized. 	
----
			
I have 2 step set up on 2 of my android devices.
 
So if something were to happen to either, I have a back up.
 
2 Step is great for security.	
----
			
I've always been here, please stop side stepping the content of the post!
 
All 2-step does is allow you game access, it does not protect or stop access to your account!!! if it did PLAYERS would be unable to BUY game time with 2-step active.....how hard is that to UNDERSTAND ?	
----
			
It does protect your account, but only from logging in on the game.
When someone has your password; they can still log in on the website and things.
But they cannot:
 
Remove the authenticator
Access the game client
So yes, there's partial protection; and Carbine would do a good move on actually extending the 2-step authentication to the website as well.
But stating that it does not protect your account at all? Sorry that's simply wrong.	
----
			
A clever use of my words does not change anything, it still leads back to what you yourself pointed out, A: it does indeed help stop a hacker playing your game client, B: it does not stop a hacker spending money from your real life bank account!
 
Don't get me wrong I've always been a Wildstar fan, but fail to see how any could look at 2-step and see it's broken.
 
P.S better chuck in : the way 2-step is implemented is broken	
----
			
{| class="blockquote"
 
I've always been here, please stop side stepping the content of the post!
 
All 2-step does is allow you game access, it does not protect or stop access to your account!!! if it did PLAYERS would be unable to BUY game time with 2-step active.....how hard is that to UNDERSTAND ?
 
 
----
			
Your post is a bit all over the place, so I'm sorry if I seem confused. On one hand, you're saying A: it does indeed help stop a hacker playing your game client but in your very first post you're complaining that it stops you from logging into PTR if you don't have the proper method of removing it. You can't really have it both ways, unless you don't want it to actually secure your PTR access. 
 
 
You also can't just spend money from the WildStar account page without having 1. IP verification. 2. the code on your credit card / paypal password, etc. 
 
2 step authentication is not intended to keep your account management safe (IP verification does). You don't need it to log into the web site. It is purely for keeping your game account safe. . . So you're really talking about two different things here. Your game account (ie: characters, logging them in, striping them, etc) which is kept safe with 2 step authentication, and then your account management, which is kept safe via different means. There are no claims anywhere from anyone that I have seen that say 2 step authentication is supposed to protect you against anything that happens on the account management side of things, that would be a bit daft because as I said you don't use it to log in (maybe it should be implemented, as Olivar mentions). 	
----
			
{| class="blockquote"
So becasue you didnt pick a good password or make sure not to go to shady sites its carbines fault? The number one reason that people get their account information(email/password for website login) Is they go to shady sites and get a keylogger.
 
This is a case of user error not carbine.
----
			
{| class="blockquote"
Your post is a bit all over the place, so I'm sorry if I seem confused.
 
On one hand, you're saying A: it does indeed help stop a hacker playing your game client but in your very first post you're complaining that it stops you from logging into PTR if you don't have the proper method of removing it. You can't really have it both ways, unless you don't want it to actually secure your PTR access. 
 
 
You also can't just spend money from the WildStar account page without having 1. IP verification. 2. the code on your credit card / paypal password, etc. 
 
2 step authentication is not intended to keep your account management safe (IP verification does). You don't need it to log into the web site. It is purely for keeping your game account safe. . . So you're really talking about two different things here. Your game account (ie: characters, logging them in, striping them, etc) which is kept safe with 2 step authentication, and then your account management, which is kept safe via different means. There are no claims anywhere from anyone that I have seen that say 2 step authentication is supposed to protect you against anything that happens on the account management side of things, that would be a bit daft because as I said you don't use it to log in (maybe it should be implemented, as Olivar mentions). 
----
			
Very nice to see you all ganging up....I'm 100% for the community
 
just for my own sake more than anything, you had me half convinced I was going bonkers!
 
Fired up avast pro and launched secure line VPN and logged to my account BOOM Your account has been accessed from an unverified location. For security purposes, we alert you with an email each time your account is accessed from an unrecognized location. I just verified this then strolled into the account (that's 15 locations now BTW)
 
Must admit the next part was tricky and took some time, I needed to find my full details, it was all scrambled hmm? (needed to think like a hacker at this point) clicked the Wildstar store and choose name change! This presented me with 2 payment methods, card or paypal, I clicked card, I was then given full name, address, and phone number, all unscrambled with my card details in place apart from the 3 digit code! Hmm another problem! I then clicked back and choose paypal (who's password I actually could not remember or even knew if I still had account) using all the personal details and I must admit one lucky guess I managed to change my paypal password and login to the account. ( have since used to buy music DL )
 
Liked I said did this for my sanity......please delete this post if it breaks any rules, or could lead to others doing illegal actions.........I rest my case  	
----
			
You're skipping a lot of steps again, so I'm not really sure what you're looking for. What started off with the authenticator some how being intended for account management safety has turned into.. I have no idea what.  1. For security purposes, we alert you with an email each time your account is accessed from an unrecognized location. I just verified this then strolled into the account 
 
That point there, would require the hacker to not only know your WildStar info, but your email information in order to verify. If you're using the same password for both, or you're not protecting your email, then that's on you, and not Carbine. 
 
Then you guessed your own paypal password. You're implying that a hacker is (one) going to be concerned enough to want to have to guess this too, and going to guess it right..... and again if you're not securing your own things, then that's on you and not Carbine (ie: using the same password in multiple locations). 
 
I'm sorry, you can conspiracy theory all you want, but I have no idea what you're trying to say here. Your post was about the authentiactor not keeping your account management safe, which it's not supposed to do, because it has nothing to do with your web site account. 
 
(Personal opinion). 
 
I'm just trying to understand. :) 	
----
			
{| class="blockquote"
 
From one of my other posts on the matter, it's now becoming an epidemic and the number one reason stopping players returning to the game!
 
If like most people you changed your phone/pad/pc there is a good chance you never kept the code generated by the original app (or lost it even if you did) keeping the same sim, phone number or IP will have no effect if you install 2-step on the new device, any code generated will be invalid! All you can do now is open a ticket with customer support and join the long list of players with the same problem! There are many posts like it on this and other forums across the internet. Carbine keep sticking up for 2-step but it's broken in a number of ways! The main reason is it does not stop you or anybody else having access to your account, all it does is stop you or others playing the game, you or they can still change your : account name/email/password or buy anything from Carbine/NCSOFT even with 2-step active.....JUST LIKE THE GAME TIME YOU JUST BOUGHT
 
Also while waiting (or giving up) you can't even test the PTR because 2-step locks you out of that too! It protects NOTHING all it does is stop you playing
 
Carbine can we please have some response on the matter ? I've been called a white knight, insulted many times for fighting the good fight all over the internet, my faith in Wildstar is unwavering! But your support for 2-step borders on madness, a product that in no way shape or form protects the players account! All it does is stop a paying customer playing the game....now that can't be right
 
----
			
"Ignorance of the law...."
 
I'm sorry to hear about your frustrations but considering using 2 step is an industry standard, if you don't have your seed code then the blame doesn't lie with Carbine. 
 
I know this isn't want you want to hear but it's the reality. My advice: be patient it will get fix and learn from your mistake...save the seed code. 
 
If it makes you feel better I didn't save mine so I will have to learn from my mistake as well. 	
----
			
To me. I think what he/she is saying is that maybe the process for getting the 2-step back is a little steep. I myself have been trying for a few days now to come back ot the game but I cannot because of the 2-step. I never changed my phone , I just took the 2-step off my phone and when i put it back on I cannot get back on because any code I put in is invalid. Having to wait days for a response for NCsoft or Carbine is kind of depressing. And does in a way make me not want to come back. I am still waiting because I like the game so much but with this type of community <mmo community> and needing instant gratification it might deter people away more quickly from the game.
 
But I could be wrong.	
----
			Nothing wrong with the process.  I think the problem(when it comes to time taken to get resolved) is manpower.  Most other games, and some of the other times this has happened to other people on this game, there's been enough support personnel to handle the issue and it's been handled in a more timely manner.  Only thing Carbine can do to fix this issue, IMNSHO, is hire more support if they are able(plus it's the holiday season, so *woot* vacation time :ph34r: )	
----
			It's meant to be hard to remove or it wouldn't be a good security measure??	
----
			
Hey, this looks like one of my posts, what with everyone completely missing the OP's point and, instead, trying to just discredit him.
Yes, the process of losing/reacquiring 2-Step is a giant pain, which the OP did say but is merely a bullet in his entire outline. The real problem here is how insecure this "extra security" really leaves us. Simply with IP verification (which is surprisingly simple to obtain) you've lost your entire account. It side-steps the authenticator and makes the whole process pointless. Unfortunately with authentication, the more secure it is, the less user friendly it tends to be... and it's supposed to be that way.	
----
			They need your email address to do that I believe	
----
			And that's so very difficult to obtain...	
----
			
{| class="blockquote"
And that's so very difficult to obtain...
----
			I give up lol	
----
			
{| class="blockquote"
 
BINGO
 
And that brings us back to why Chillia said we have 2-step in the first place!
 
It's this statement I find misleading and worrying on the website
 
How does the WildStar Authenticator work?
First, you will log in to WildStar as normal, with your account name and password. Next, you’ll be asked for a six-digit numeric code from the authenticator. At this point, simply enter the code provided by the authenticator to proceed using your mouse (your numpad will be disabled during this step). Without this code, no one will be able to log in to your account. This effectively prevents attackers from unauthorized use of your account.
 
----
			
In simple terms here is the problem.
 
Five months ago I canceled my sub but didn't cancel 2 step (my problem). The problem as I see it is now when I update my sub I was not asked for 2 step to log in to account management. I try and login to the game and am faced with 2 step. That doesn't jive for me. My pixels are protected but my real world info isn't. 
 
Not to mention I paid and now can't play. All because I left 2 step on and can't get in the game, but I can do whatever I want in account management. 
 
/shrug	
----
			
{| class="blockquote"
It does protect your account, but only from logging in on the game.
When someone has your password; they can still log in on the website and things.
But they cannot:
Remove the authenticator
Access the game client
So yes, there's partial protection; and Carbine would do a good move on actually extending the 2-step authentication to the website as well.
But stating that it does not protect your account at all? Sorry that's simply wrong.
 
----
			
{| class="blockquote"
Little Chua, the website Authenticates on an IP address, so the only one whom can authenticate someone through is if they have your Email account as well.
----
			
I am happy that NcSoft has some security for its paying clients. However in a age where Sony gets hacked on a regular basis the security here is weak.
 
But, I believe that the OP was more about that the system here is unwieldy. The biggest issue being that Customer Support is horrible in general. Turn around time on a security issue of over 24 hours is horrendous. The worst part of it all is that the system as currently implemented is causing players to turn away from the game.
 
A better system would be more streamlined and have a better response time. It would also increase the security on what is really important and that is not the game access. Our personal information is 1000 times more important than the loss of the game itself in any way shape or form. Yet of the two things that there is security for, it has the weaker protection. Why?	
----
			I wouldn't trust my account to go with out the two step, I put it on two devices, wrote down the seed. It's really cool you get 2% buffs and a mount for it enabled. But that doesn't change the fact it makes the game extremely tedious to even just login especially when you have to click the randomly generated keys with the mouse pointer and my client crashed very frequently due to optimization. When the client crashed and I tried to relog the first time I'd get an error "Another Client" is logged on or something and would have to do it again. I was spending too much time at the login screen and that sapped my fun and broke immersion. It wasn't the reason I lost interest and put the game on the game burner but it was just one of those little things that piled up. A polished game doesn't have many error messages, still waiting on namely better optimization but IP remembrance would certainly be a boon to the game aswell.	
----
			
Hey Chillia,
 
I am one of those that can't play till they remove my old authenticator.  Ticket 4167785.  Could you see if you can get the support people to process this?  I have been waiting since yesterday.  Thanks.	 	
----
			
{| class="blockquote"
I think if you had of been here when the huge rush of hacked accounts came into play (note, as far as I am aware, no account that had 2 step authentication enabled was hacked AFTER they had it enabled) you may feel differently. :) The forums were flooded at that time with far more posts than we see these days, and 2 step helped an incredible amount. I would not like to see that happen again. It's no fun losing all of your items and having to wait for support to help you out because you have re-set your phone or lost your code is a small inconvenience in the long term compared to having your account taken over by someone unauthorized. 
----
			
{| class="blockquote"
 
BINGO
 
And that brings us back to why Chillia said we have 2-step in the first place!
 
It's this statement I find misleading and worrying on the website
 
How does the WildStar Authenticator work?
First, you will log in to WildStar as normal, with your account name and password. Next, you’ll be asked for a six-digit numeric code from the authenticator. At this point, simply enter the code provided by the authenticator to proceed using your mouse (your numpad will be disabled during this step). Without this code, no one will be able to log in to your account. This effectively prevents attackers from unauthorized use of your account.
 
----
			
I haven't played in four months or so, no longer subbed, but figure I would stop in and see if anything was new. 
 
I loathe this 2step authenticator, it's not the industry standard, and I have accounts across a few mmo's, and I have yet to be hacked. It was thrown together pre launch and this is the result. I have been locked out of my account by it, and had to wait for support (about 72h) to get my account unlocked, and I'm sure I would have to do it again if I wanted to play Wildstar again. 
 
In all honesty I don't miss it at all, it's a wall and deterrent to new customers, old, and the non tech savvy gamer looking to get into Wildstar/mmo's. Needless to say I won't be contacting support just to go through that 2step nonsense to pick up and play this game again. 
 
just my 2cents~
 
edit: not sure how I can even post this come to think about it?	
----
			
{| class="blockquote"
"Ignorance of the law...."
 
I'm sorry to hear about your frustrations but considering using 2 step is an industry standard, if you don't have your seed code then the blame doesn't lie with Carbine. 
 
I know this isn't want you want to hear but it's the reality. My advice: be patient it will get fix and learn from your mistake...save the seed code. 
 
If it makes you feel better I didn't save mine so I will have to learn from my mistake as well. 
----
			
{| class="blockquote"
I haven't played in four months or so, no longer subbed, but figure I would stop in and see if anything was new. 
 
I loathe this 2step authenticator, it's not the industry standard, and I have accounts across a few mmo's, and I have yet to be hacked. It was thrown together pre launch and this is the result. I have been locked out of my account by it, and had to wait for support (about 72h) to get my account unlocked, and I'm sure I would have to do it again if I wanted to play Wildstar again. 
 
In all honesty I don't miss it at all, it's a wall and deterrent to new customers, old, and the non tech savvy gamer looking to get into Wildstar/mmo's. Needless to say I won't be contacting support just to go through that 2step nonsense to pick up and play this game again. 
 
just my 2cents~
 
edit: not sure how I can even post this come to think about it?
----
			
Oh were to start.
 
Account management is locked down by IP Authentication.  Now, yes its easy to get around if you know all the info.  So I have to know your email and your password to access your account, but I also need to know your email password to verify it.  So those claiming its easy, either your not securing your email account very well or your using the same password, and "that's not a me(Carbine) problem, that's a you problem."
 
Account access via the Game client is locked down by 2-step Authentication.  Its your responsibility to either remove the key or keep the seed code.  The issue I see with why it is seperate from the outside is because Carbine uses NCSoft as the account management piece (you'll notice logins go to the lineage account system when you put your password in). But they use their own system for the game.  And since they probably can't make NCSoft use the authenticator for the account they have to leave it separate.
 
The underlying issue which probably isn't clear here is that its 2 different systems run by 2 companies.  NCSoft owning the account management piece and Carbine controlling game access.  The systems are tied together but again its probably not doable without significant engineering time from NCSoft to implement the 2-step on their end without affecting other games in NCSofts wheelhouse.  Something Carbine probably has little to no say over.	
----
			
{| class="blockquote"
I'm not very tech savvy, I failed to write down my seed code when I attached 2-step to my game.  But if I ever have to get it removed and reset, I don't see it as a wall.  It's MY FAULT if I have to go through that headache, and I really don't see how Carbine should be the one that has all this *cupcake* thrown at them for it.
 
Yea, I was talking to my husband about this the other day, and I told him to remind me if I ever need to remove it that I have to come make a post complaining about it :P
----
			
{| class="blockquote"
You're right, it was my fault! But this is Carbine problem, and the forum seems to have posts today of frustrated players as it did the first week the two step was introduced. All I did was pop in and give my thoughts on it. Carbine game and loss, not mine, I just log into another game (securely) and move on. I do have my seed code this time around (not sure if it still works, I have a different phone), I just won't bother with it at this point is all, that's how much I dislike that 2step.
 
A perspective is all for a company that could use it, best of wishes and look forward to reading about your changes this 2015!
----
			
I'm not blaming Carbine but it'd be nice to have a different method of deactivation...
I jsut got back from a bit of an ordeal and part of it was getting a new phone. I transfered over the seed code i was given and made sure the authenticator was synced up too, but it didn't work.
 
I think something like requesting the serial code for the game and full name for a character on a server would be decent. Least that's how I've seen alternate methods done. Since the site lists the last 4 digits, have it ask for a different section of the security code?	
----
			
FACT: no one hacks W* accounts anymore.
 
FACT: authenticators are annoying
 
FACT: you should just drop it and never pick it up again	
----
			
{| class="blockquote"
I'm not very tech savvy, I failed to write down my seed code when I attached 2-step to my game.  But if I ever have to get it removed and reset, I don't see it as a wall.  It's MY FAULT if I have to go through that headache, and I really don't see how Carbine should be the one that has all this *cupcake* thrown at them for it.
 
Yea, I was talking to my husband about this the other day, and I told him to remind me if I ever need to remove it that I have to come make a post complaining about it :P
----
			
{| class="blockquote"
If you want, you can deactivate your own authenticator (easily, since you have the authenticator), spin up a new authenticator code, and write down the new seed.  That's what I did to avoid the potential hassle.
 
I mean, there's only so much I can tell everyone who's having a 2FA problem in the case that they shut down their original device.  It's a security layer, that's not the kind of thing that any company makes easy or automatic (that's when hackers actually do come after your account).  I know it might annoy some returning players, but it does make me feel better that removing my authenticator without the code isn't something that can be done easily.
----