102706-i-dont-like-2-step-verification

== Content ==
			
I couldn't find my phone earlier (my wife had taken it).  I was unable to play the game obviously.  I thought "no problem I'll just install the authenticator to my computer".  Except it doesn't work like that.  Only one device can be the authenticator.  Not only that, I would have to contact support to get them to unhook the phone as the auth device.  Ugh!  That would have meant days or even a week or more without being able to play the game.  Lame!  Why don't they use the system that looks at your IP address like GW2 does?  So I'm not going to use that two-step crap.  I know, I know.. but you will get hacked... if I do then I'll put in a ticket and have to wait a few days to a week or more for support to fix it most likely, the same crap I would have to do if my phone breaks or gets stolen which is more likely than getting hacked. 
 
I also don't like how the entry interface jumbles the numbers.  Why does it do that?  These are my opinions on this so take that into consideration. 	
----
			Im not a fan of two step verification either, at least through the phone. But you can keep your account pretty secure just by using a different username/password (than what you usually use on the internet) and making sure you don't have any key-loggers.	
----
			I don't like wearing condoms, I don't like paying for car insurance, I don't like using 2-step, I don't like going to the dentist, etc. But I do, because it's worth it.	
----
			Don't use it. Just let Carbine rebuild your account every few months. 	
----
			It's a total pain in the ass in this game. They could have a launcher that supported 2FA memory, or an email system. IIRC a dev said WoW had "years and years" to develop the technology. I'm vaguely annoyed that I lose out on in-game benefits but I'm not clicking those buttons every time I log in.	
----
			
you know what else is a giant pain in the ass? Locking all my windows and doors before I leave my house, and making sure my car alarm is on, and making sure the chain is wrapped through the wheels of my motorcycle whenever I park it, and remembering the secret answer to my verification questions on my stock investment management login, and going to the bank or ATM to get money instead of carrying all of it around at the same time. 
 
 
I think you might see where this is going. This is the method we have, and it's honestly NOT all that bad. It takes 20 seconds, if that. Your wife took your phone.. well. that sucks. Why does she get to take your phone? Why did you put that on the device that she might take? If she's going to be gone for a long time, call her for the code and remove it from your account and re-set it up for the on computer application.
 
It's a security measure because people are assholes who are going to try and steal your stuff. Blame the people who make this kind of thing necessary, not the devs. They're doing the best they can at the moment, they've even said they're considering the IP tracking method but that'll take some time to implement.
 
They've said before they're aware that it's somewhat of a hassle and they're working to make it better. Does that help?	
----
			
If you have an authenticator, you can remove it in the same way you added it. You only need to contact support to remove it when you've lost your authenticator and have no means to generate the code.
 
When setting up the authenticator, you're shown the authenticator's key. This key can be used to setup as many authenticators as you wish. You can have several phones and your computer all generating the same code. Anything capable of running a web browser with javascript can act as an authenticator.
 
They mentioned doing a QoL update for the authenticator a while ago, which I imagine would make it like GW2 and factor in the IP. It probably won't happen any time soon however, if at all.
 
The random button order is basically to make it feel more secure. Officially, it's to prevent very basic keyloggers that can read the cursor position. WildStar specific keyloggers will of course still get your code, but Carbine doesn't believe this to be a threat, since this type of keylogger can do much more dangerous things.	
----
			
Sure, the process is a pain, having to click random buttons EVERY time you log in, but really though, it takes no more than about 5-10 seconds put in the key. If 10 seconds inconveniences you, then I don't get how you are able to devote time to playing an MMO. Also, ever since I've owned a smartphone, I don't usually let it out of my sight or off my person, as most tend to cost a fair bit of $$$ to buy or replace.
 
Just my 2 cents.	
----
			
{| class="blockquote"
Sure, the process is a pain, having to click random buttons EVERY time you log in, but really though, it takes no more than about 5-10 seconds put in the key. If 10 seconds inconveniences you, then I don't get how you are able to devote time to playing an MMO. Also, ever since I've owned a smartphone, I don't usually let it out of my sight or off my person, as most tend to cost a fair bit of $$$ to buy or replace.
 
Just my 2 cents.
----
			ConsideringA. I'm not a hardcore playerB. I know my stuff IT wise and keep my PC insanely secureI have no reason to use the 2FA. It's not for everyone. Also recovering from a mid-combat DC with Wildstar's 2FA is... well, shitty.	
----
			
{| class="blockquote"
I couldn't find my phone earlier (my wife had taken it).  I was unable to play the game obviously.  I thought "no problem I'll just install the authenticator to my computer".  Except it doesn't work like that.  Only one device can be the authenticator.  Not only that, I would have to contact support to get them to unhook the phone as the auth device.  Ugh!  That would have meant days or even a week or more without being able to play the game.  Lame!  Why don't they use the system that looks at your IP address like GW2 does?  So I'm not going to use that two-step crap.  I know, I know.. but you will get hacked... if I do then I'll put in a ticket and have to wait a few days to a week or more for support to fix it most likely, the same crap I would have to do if my phone breaks or gets stolen which is more likely than getting hacked. 
 
I also don't like how the entry interface jumbles the numbers.  Why does it do that?  These are my opinions on this so take that into consideration. 
----
			@OP: It jumbles the numbers because that keeps a hijacker from simply logging pointer position to access your account. Security through obscurity.	
----
			
They could borrow from WoW's authentication. I don't eve know the last time I had to put my code in while logging into WoW. Only seemed like one had to every few weeks/after a version update.
I like the security, but I'm human and therefore lazy to the idea of having to turn phone on, P/W it to get to home screen, fire up 2step to get 6#s.
DCing makes this process even more of a drag.	
----
			
{| class="blockquote"
They could borrow from WoW's authentication. I don't eve know the last time I had to put my code in while logging into WoW. Only seemed like one had to every few weeks/after a version update.
I like the security, but I'm human and therefore lazy to the idea of having to turn phone on, P/W it to get to home screen, fire up 2step to get 6#s.
DCing makes this process even more of a drag.
----
			
Reason you quit Wildstar: I had to get up off my seat to pick up my phone and input 6 numbers.
 
I can see it being a serious QoL issue that may have a negative impact on player retention when I think of it that way (sorry for the sarcasm). Oddly enough, if getting up to pick up a phone is a nuisance there may be other QoL issues in RL.	
----
			
In Guild Wars 2, I log in from a unique IP, I use my authenticator and numpad, and I never have to authenticate again from that IP. Enter my password, press Play, and away I go.
 
Here, I have to have my phone and hunt and peck through mousing my authentication. Every. Single. Time. After I pop in my password.
 
One would think that both being under the NCSoft banner, they would share ideas on security code. Oh well.	
----
			
{| class="blockquote"
Reason you quit Wildstar: I had to get up off my seat to pick up my phone and input 6 numbers.
 
I can see it being a serious QoL issue that may have a negative impact on player retention when I think of it that way (sorry for the sarcasm). Oddly enough, if getting up to pick up a phone is a nuisance there may be other QoL issues in RL.
 
----
			You can indeed use it on a computer, or other smartphone/tablet devices.You need to write down your "key" when its first issued.You need a program to use it on your PC.  (ex. WinAuth)You can have Google Authenticator installed on multiple devices, granted if you write down your "key" in the beginning.	
----
			
{| class="blockquote"
Yeah I just use the desktop app, it's always running, so i just tab out, click, slap the code in and go. Takes less than 10s. Considering I've sat in the dungeon Q for 90min+, I can handle it.
----
			
{| class="blockquote"
@OP: It jumbles the numbers because that keeps a hijacker from simply logging pointer position to access your account. Security through obscurity.
----
			
{| class="blockquote"
I couldn't find my phone earlier (my wife had taken it).  I was unable to play the game obviously.  I thought "no problem I'll just install the authenticator to my computer".  Except it doesn't work like that.  Only one device can be the authenticator.  Not only that, I would have to contact support to get them to unhook the phone as the auth device.  Ugh!  That would have meant days or even a week or more without being able to play the game.  Lame!  Why don't they use the system that looks at your IP address like GW2 does?  So I'm not going to use that two-step crap.  I know, I know.. but you will get hacked... if I do then I'll put in a ticket and have to wait a few days to a week or more for support to fix it most likely, the same crap I would have to do if my phone breaks or gets stolen which is more likely than getting hacked. 
 
I also don't like how the entry interface jumbles the numbers.  Why does it do that?  These are my opinions on this so take that into consideration. 
----
			Remember that page where you scan a barcode to set up 2step? Well there is a code on that page too, commonly called a seed, write it down and with that you can enable 2step from your phone and WinAuth from your PC. I also created a new folder on my desktop, set its name to my password. Now when I login, I copy/paste my PW from that folder and set WinAuth to stay ontop of other windows which I move it over the clickable numbers to input my code and I'm in. Fast, easy and secure.	
----
			people dont like prostate exams either, but its totally worth it, as long as your doctor does not try to pretend to be a pirate yarrr	
----
			Sorry  you have to have a hidden weapon carry permit on nexus. Didn't you know about that?	
----
			
{| class="blockquote"
Don't use it. Just let Carbine rebuild your account every few months. 
----
			Chua bookmarking topic, so can link back to it when all cry account compromised.	
----
			It takes 3 seconds.  :huh:	
----
			
Why do i read so many threads where the guy says the wifey has his phone? Id never use my bf's phone, maybe borrow it a couple minutes if mines broken but not actually take it out of the house and go shopping or whatever. Serious question :)
 
Also 2 step is annoying at first, now i dont even think about it and i use winauth just to not have to worry if my phone gets stolen or some shit. Its just like typing in the password, soon enough you just do it without even thinking about it.	
----
			
i love 2 step verification!!! weeeeeeeee
 
**puts on cybernetic eyepatch and gets on run-down retroblade**
 
**does donuts in Malvolios front yard**
 
**crashes retroblade due to loss of depth perception from eyepatch**	
----
			
{| class="blockquote"
Considering
 
A. I'm not a hardcore player
 
B. I know my stuff IT wise and keep my PC insanely secure
 
I have no reason to use the 2FA. It's not for everyone. Also recovering from a mid-combat DC with Wildstar's 2FA is... well, shitty.
----
			I don't like getting hacked more than I don't like the authentication.	
----
			My account got hacked, it sucked!  I use an authenticator now.	
----