108297-three-suggestions-for-2-step-verification

== Content ==
			
1) Please remove the on-screen keyboard.
 
Virtually no other app which uses Google Authenticator requires an on-screen keyboard to be used when logging in. That's because it's stupid and nonsensical to be using an OSK for a code that changes itself based on a complex algorithm and an unique token ID every thirty seconds. These things were designed to be virtually uncrackable even when using a regular keyboard as it is. Also, it's a pain in the arse to use an OSK every time you log in.
 
2) Make 2-Step Verification mandatory to play Wildstar.
 
Even if you have to release an online app to generate an authenticator code or bundle future copies of Wildstar with a physical authenticator or do a bundle where you sell $5 physical authenticators with the game, this would probably be a good move to deter illicit gold farming companies that steal accounts to spam inboxes, spam chat and farm platinum. (Red 5, developers of Firefall, have implemented a web-based authenticator when logging in.)
 
3) Make the game itself remember your login location.
 
I mean come on, it's 2014 and you guys can't even implement 'Remember login location' in-game even though it's active everywhere else including the game's website and forums so you don't have to enter an authenticator code every time you login, and is a standard feature of using Google Authenticator?
 
Really? Just... really?	
----
			
1/ Think of it as a quick training for telegraphs and also why, since it works?
 
2/ Are you asking to force Internet users to use more security and expecting them to welcome it and not shout how it's so annoying, restrictive and make them lose up to 20 seconds everytime that screw up their game time? Oooooh boy.
 
3/ Right now, I don't see how it is relevant since from what I see the game doesn't check if you're logging from a new address (which it should, like the forums)	
----
			
{| class="blockquote"
1/ Think of it as a quick training for telegraphs and also why, since it works?
----
			
{| class="blockquote"
Except you don't click random areas of the screen for telegraphs. :P
The OP is right, it's an unnecessary step of security.
 
2)Maybe make it a real world benefit to use the keys. $20 a month without the key, $15 with.
 
3) Did you mean have the game remember your machine/ip, and not require the 2 step for a certain period of time?
I'd like that, and more people might be willing to use 2 step then.
----
			
1.  one more step for you? one more hurdle for an account stealer. That's the idea here, they don't want to make it annoying for you, but they do want to make it as difficult as possible for someone to take your account. it takes quite literally 5 seconds to do this. Why is this such a problem? You're going to be clicking and moving the mouse for the next 2-6 HOURS while you play, why do you have such a problem clicking 6 more things?
 
2. This would be good for account security but bad for people who are  against the authenticator or do not have the resources to devote to implementing it (again this is a super minor complaint but one I'll concede since it takes a google account and phone/computer resources to use) . It gives them no choice, not good for keeping players around.
 
3 They said a long time ago they were batting this around if not finding ways to implement it. They just had to get something in place ASAP to prevent current problems. I'm 99% sure you can find a direct quote from the devs saying this in one of their talks.
 
 
 
as for benefits for using the keys.. well.. isn't the xp/money bonus and free mount enough? .. man , that's greedy.	
----
			
{| class="blockquote"
1.  one more step for you? one more hurdle for an account stealer. That's the idea here, they don't want to make it annoying for you, but they do want to make it as difficult as possible for someone to take your account. it takes quite literally 5 seconds to do this. Why is this such a problem? You're going to be clicking and moving the mouse for the next 2-6 HOURS while you play, why do you have such a problem clicking 6 more things?
 
2. This would be good for account security but bad for people who are  against the authenticator or do not have the resources to devote to implementing it (again this is a super minor complaint but one I'll concede since it takes a google account and phone/computer resources to use) . It gives them no choice, not good for keeping players around.
----
			
I'd love the third option, remember the IP/mac of the system and require the authenticator once a week/2weeks/month; blizzard lets you choose to enter your authenticator daily or monthly but if you choose to enter it daily you can copy and paste/type the code in if you wanted to
 
I personally use winauth ( https://winauth.com ) for my 2step to remove the need of using my phone and could just copy->paste the code but the onscreen wildstar keyboard for 2-step makes me want to afk and move around once in a while alt-tabbed instead of logging in.
 
I understand typing can get keylogged but the authenticator in WoW can't be cracked unless you have somebody wiresharking your network within 6 seconds etc etc the code is only valid for 10 seconds (less) anyway so who cares if it gets keylogged (you shouldn't have anything keylogged but just stating facts)	
----