Jump to content

  • Curse Sites
Help
* * * * * 1 votes

Beta Feature: Mobile Two-Factor Authentication

arenanet

  • Please log in to reply
35 replies to this topic

#1 Khalija

Khalija

    Leaf on the Wind

  • Administrators
  • Curse Premium
  • 4180 posts
  • Profession:Mesmer
  • Server:Jade Quarry

Posted 10 October 2012 - 09:13 PM

Tonight, Mike Lewis has announced that ArenaNet is "making a mobile two-factor authentication solution available for beta testing, effective immediately."

Quote

Mobile two-factor authentication is an alternative means of securing your Guild Wars 2 account, and like e-mail authentication, is optional but strongly encouraged. Rather than sending you an e-mail when unauthorized login attempts occur, the game (or any of our online web sites) will prompt you for a six-digit number any time you log in to a Mobile Authenticator-protected account. Using a freely available app on three major smartphone platforms – iOS, Android, and Windows Phone – you can obtain the correct six-digit number unique to your account. These numbers change every 30 seconds and can only be used once; this ensures that without your mobile device, an attacker would not be able to compromise your Guild Wars 2 account.

Mike reminds the user that this new feature is still considered in beta and are still working on its development.

Quote

We have already identified two major improvements to the feature that we will complete before releasing this system for general use:
  • To increase security of your account, unlinking the Mobile Authenticator will require additional six-digit codes.
  • We will be introducing an option to “remember my current network” so that you will not have to authenticate every login from trusted environments.


#2 Dove

Dove

    Elite Guru

  • Curse Premium
  • Curse Premium
  • 1180 posts

Posted 10 October 2012 - 09:15 PM

<--BlackBerry user

#3 Orici

Orici

    Fahrar Cub

  • Members
  • 34 posts

Posted 10 October 2012 - 09:43 PM

Nice to see this excellent feature coming to gw2

#4 metalsazz

metalsazz

    Sylvari Specialist

  • Members
  • 590 posts

Posted 10 October 2012 - 09:46 PM

<-----Also a blackberry user

#5 yahikodrg

yahikodrg

    Vanguard Scout

  • Members
  • 151 posts
  • Guild Tag:[TOR]
  • Server:Sea of Sorrows

Posted 10 October 2012 - 09:49 PM

I'd rather be able to order a $5 key chain authenticator because if you upgrade phones you have to call customer support to remove the authenticator just to log on to reapply it.

#6 Jentari

Jentari

    Vanguard Scout

  • Curse Premium
  • Curse Premium
  • 250 posts
  • Server:Crystal Desert

Posted 10 October 2012 - 10:05 PM

Give me a key chain authenticator.

#7 FSnake

FSnake

    Asuran Acolyte

  • Members
  • 146 posts
  • Location:US
  • Guild Tag:[TYYS]
  • Server:Stormbluff Isle

Posted 10 October 2012 - 10:13 PM

Well, it's about time that Anet is getting serious with online security.  They should have this feature available since go live back in August which would have reduce a lot of the accounts hacking in those early days.  However, better late than never.

Now, where is the iOS tablet app Anet was talking about for GW2 a year ago?

#8 Azure Skye

Azure Skye

    Golem Rider

  • Members
  • 2099 posts
  • Location:(づ。*◕__◕。)づ・。*。✧・゜゜・。✧・。*。✧ Magic!
  • Profession:Mesmer
  • Guild Tag:[CUTE]
  • Server:Dragonbrand

Posted 10 October 2012 - 10:14 PM

<--- doesn't have a cell phone and uses common sense. :)

#9 st0rmie

st0rmie

    Fahrar Cub

  • Members
  • 37 posts

Posted 10 October 2012 - 10:51 PM

View Postyahikodrg, on 10 October 2012 - 09:49 PM, said:

I'd rather be able to order a $5 key chain authenticator because if you upgrade phones you have to call customer support to remove the authenticator just to log on to reapply it.

What? No you don't. You only need to do that if you forget to unlink the authenticator before you sell/trade/return your old phone.

Unlink authenticator using app on old phone; switch phones; re-link using app on new phone.

Certainly it would be nice to have a physical option as well as the iOS/Android/WP7 apps, but this problem you describe is not really a problem.

#10 HawkofStorms

HawkofStorms

    Guru's Source of Witty Banter

  • Members
  • 3101 posts

Posted 10 October 2012 - 11:05 PM

So, if you lose/brick your cell phone, you're screwed (since you also need it to decouple your account).

Eh, staying away from this one.

#11 Reiden221

Reiden221

    Vanguard Scout

  • Members
  • 383 posts
  • Guild Tag:[DAoT]
  • Server:Sanctum of Rall

Posted 10 October 2012 - 11:32 PM

It is a move in the right direction based on all the concerns, complaints, and whining from the community, but there are flaws...

- You don't have a cell phone
- You don't have one of the cell phone types mentioned
- Your cell phone breaks/stolen/melts/etc

#12 ogrejd

ogrejd

    Seraph Guardian

  • Members
  • 1054 posts
  • Guild Tag:[MOoN]
  • Server:Borlis Pass

Posted 11 October 2012 - 12:07 AM

Meh. All this effort to secure accounts when a single, simple, in-game change would wipe out most of the reasons why people would attempt to steal accounts.  Sure, some people who would want to twink out their friends and alt accounts would need to do so by sending items, but most of the goldsellers (ie, the ones stealing accounts) would disappear overnight if it became impossible to directly transfer gold between accounts (some simple monitoring of the Trading Post, which they almost certainly do already, for unusual transactions would get rid of most of the rest).

#13 lazykoala

lazykoala

    Sylvari Specialist

  • Members
  • 848 posts
  • Server:Sanctum of Rall

Posted 11 October 2012 - 12:15 AM

Nice to see the mobile security app almost ready, especially with all the account hacking that initially occurred. Next we need the mobile trading post and general in game app!

#14 ArlanKels

ArlanKels

    Vanguard Scout

  • Members
  • 294 posts

Posted 11 October 2012 - 01:02 AM

And for those of us who don't have cellphones? :(

#15 joeobowyer

joeobowyer

    Pale Tree Seedling

  • New Members
  • 5 posts

Posted 11 October 2012 - 01:07 AM

the authenticator just to log on to reapply it.
Posted Image

#16 Xephyr

Xephyr

    Fashion Addict

  • Members
  • 428 posts
  • Profession:Guardian
  • Guild Tag:[Syn]
  • Server:Tarnished Coast

Posted 11 October 2012 - 02:03 AM

aww.. I want a keychain authenticator. :/

#17 Merryham

Merryham

    Pale Tree Seedling

  • Members
  • 9 posts

Posted 11 October 2012 - 04:22 AM

Worked for me! Now I feel secu---- *authenticator hacked*

._.


Seriously though, nice. :)

#18 ThiaTheMuse

ThiaTheMuse

    Asuran Acolyte

  • Members
  • 117 posts
  • Location:Phoenix, AZ
  • Guild Tag:[Slam]
  • Server:Stormbluff Isle

Posted 11 October 2012 - 04:57 AM

<~~~~~ Samsung flip-phone owner. "App? What's that?"

I hope they have a key-chain option when it goes live.

#19 Lordkrall

Lordkrall

    Legion Commander

  • Members
  • 5370 posts
  • Location:Sweden
  • Profession:Warrior
  • Server:Aurora Glade

Posted 11 October 2012 - 05:54 AM

ArenaNet does not have extra authentication - People complain
ArenaNet does enables extra authentication - People complain about them adding the "wrong" kind of autentication.

How come this is more or less what always happens to everything ArenaNet does?

They are not patching enough!
*patch* OMG WHY DID YOU NERF MY PROFESSION!??!?!

I remember a time when people were actually happy when a company did something good.

Edited by Lordkrall, 11 October 2012 - 06:47 AM.


#20 solariz

solariz

    Asuran Acolyte

  • Curse Premium
  • Curse Premium
  • 70 posts
  • Location:Germany
  • Server:Abaddon’s Mouth

Posted 11 October 2012 - 06:44 AM

Oh Realy People, the introducing such a great thing ans you complain? Over 60% of the US Population have a smartphone. In EU its over 75%  Those ppl without a capable smartphone are still free to use the email methode.


The Methode of Authentication is damn right and exact the right choice. I know people always complain no matter what you do but really I dont see the point in here. Why should I be forced to spend another $10 for a Authenticator key chain device, this is so yesterday. I have to carry it around and the possibility that I loose this one compared to my beloved Smartphone is rather high.

Thank you Anet this was the right choice!

Edited by solariz, 11 October 2012 - 06:44 AM.

( My Char: Fallacia Nox )

#21 GotDamned

GotDamned

    Fahrar Cub

  • Members
  • 33 posts

Posted 11 October 2012 - 06:57 AM

View PostHawkofStorms, on 10 October 2012 - 11:05 PM, said:

So, if you lose/brick your cell phone, you're screwed (since you also need it to decouple your account).

Eh, staying away from this one.

Nope, you can use the Authenticator also online afaik. (at least for user with an android phone)


View PostReiden221, on 10 October 2012 - 11:32 PM, said:

It is a move in the right direction based on all the concerns, complaints, and whining from the community, but there are flaws...

- You don't have a cell phone
- You don't have one of the cell phone types mentioned
- Your cell phone breaks/stolen/melts/etc
Flaws? You don't need to use the authenticator, so you don't necessary need a smartphone.
an extra keychain for a few bugs would be nice, but no reason to complain about the current auth


View PostLordkrall, on 11 October 2012 - 05:54 AM, said:

ArenaNet does not have extra authentication - People complain
ArenaNet does enables extra authentication - People complain about them adding the "wrong" kind of autentication.

How come this is more or less what always happens to everything ArenaNet does?

They are not patching enough!
*patch* OMG WHY DID YOU NERF MY PROFESSION!??!?!

I remember a time when people were actually happy when a company did something good.
Lol, exactly.
I love that arena decided to give as a mobile authenticator.
I also have never seen anything i'd really complain about.
DR? Read lots about it, never happened to me so i can't judge
Necro-Bugs? Ok, there are a few, but they're fixing them
havn't seen anything gone worse through patches.


View Postsolariz, on 11 October 2012 - 06:44 AM, said:

Oh Realy People, the introducing such a great thing ans you complain? Over 60% of the US Population have a smartphone. In EU its over 75%  Those ppl without a capable smartphone are still free to use the email methode.
I live in germany, and i would say, we got about 90% Smartphoneusers (if you just look at the people who play mmo's)


View Postsolariz, on 11 October 2012 - 06:44 AM, said:

The Methode of Authentication is damn right and exact the right choice. I know people always complain no matter what you do but really I dont see the point in here. Why should I be forced to spend another $10 for a Authenticator key chain device, this is so yesterday. I have to carry it around and the possibility that I loose this one compared to my beloved Smartphone is rather high.

Thank you Anet this was the right choice!
Right. Sure, as another option, it would be no problem.
But why complain about an optional free authenticator?
Don't complain about not having a physical you need to buy, just ask them about it.
Start a discussion in the forums and ask politely for it.

#22 solariz

solariz

    Asuran Acolyte

  • Curse Premium
  • Curse Premium
  • 70 posts
  • Location:Germany
  • Server:Abaddon’s Mouth

Posted 11 October 2012 - 07:03 AM

[quote name='HawkofStorms' timestamp='1349910307' post='2009728']
So, if you lose/brick your cell phone, you're screwed (since you also need it to decouple your account).

Eh, staying away from this one.
[/quote]

Well Sir you a totaly uninformed guy. Maybe first inform before complaining?

In Short: To setup your Authenticator you receive a QR Code, just print it and put it in a secure place. So if you loose your phone or whatever you have to lose the QR Code too. With this QR Code you can easy retrain every smartphone. And Still if you lose both, there is a manual way to unlink it over the support by proving several things.
( My Char: Fallacia Nox )

#23 Belechael

Belechael

    Pale Tree Seedling

  • New Members
  • 3 posts
  • Guild Tag:[Gr]
  • Server:Aurora Glade

Posted 11 October 2012 - 07:42 AM

ArenaNet is not Bioware (thank god for that!), so I expect them to NOT mess things up with this.

However, in SWTOR, my iphone got stolen and I had to call customer service, who kept me online for 10 or so minutes in order to learn from someone at their IT department that it is not possible for me to deauthorize my old authenticator in my stolen phone and authorize a new one. They had to manually do it themselves and they warned me that I could no longer use an authenticator, 'cause the system would try to find the one in my stolen phone.

Now, if you had a different experience than mine in a different game it doesn't invalidate some people's fear that things can become messy. I will wait and read comments about this before I install it on my iphone this time.

#24 Lordkrall

Lordkrall

    Legion Commander

  • Members
  • 5370 posts
  • Location:Sweden
  • Profession:Warrior
  • Server:Aurora Glade

Posted 11 October 2012 - 07:50 AM

[quote name='Belechael' timestamp='1349941327' post='2010460']
ArenaNet is not Bioware (thank god for that!), so I expect them to NOT mess things up with this.

However, in SWTOR, my iphone got stolen and I had to call customer service, who kept me online for 10 or so minutes in order to learn from someone at their IT department that it is not possible for me to deauthorize my old authenticator in my stolen phone and authorize a new one. They had to manually do it themselves and they warned me that I could no longer use an authenticator, 'cause the system would try to find the one in my stolen phone.

Now, if you had a different experience than mine in a different game it doesn't invalidate some people's fear that things can become messy. I will wait and read comments about this before I install it on my iphone this time.
[/quote]

[quote]
[color=#242424][font=CronosPro, Helvetica, Arial, sans-serif][size=4]
[url="https://en.support.guildwars2.com/app/answers/detail/a_id/9238#"]What should I do if I lose or want to unlink the mobile device linked to my account?[/url][/size][/font][/color]
[color=#242424]
Visit [url="https://account.guildwars2.com/recovery"]Account Recovery[/url] to unlink your authenticator. You can also unlink the authenticator at any time by logging in to [url="https://account.guildwars2.com/"]Account Management[/url] and proceeding to the Security section. Please note that to log in while two-factor authentication is configured on your account, you will need to have access to your mobile device.[/color][color=#242424]
[/quote][/color]

From [url="https://en.support.guildwars2.com/app/answers/detail/a_id/9238"]https://en.support.guildwars2.com/app/answers/detail/a_id/9238[/url]

#25 solariz

solariz

    Asuran Acolyte

  • Curse Premium
  • Curse Premium
  • 70 posts
  • Location:Germany
  • Server:Abaddon’s Mouth

Posted 11 October 2012 - 08:11 AM

[quote name='Belechael' timestamp='1349941327' post='2010460']
Now, if you had a different experience than mine in a different game it doesn't invalidate some people's fear that things can become messy. I will wait and read comments about this before I install it on my iphone this time.
[/quote]

As I said, this is a normal Google Authenticator and this is perfect. You receive a page with a QR Code to activate it in the phone. Just save the QR Code local in a safe place and you be good even if your phone explodes, stolen or whatever.

This is the most simple way, no need to rely on a account recovery because you can reactivate it by yourself at anytime. Got no Phone ? Download the Android SDK there is a Android emulator included, perfectly to run the authenticator on your PC. So super simple.

Edited by solariz, 11 October 2012 - 08:18 AM.

( My Char: Fallacia Nox )

#26 yahikodrg

yahikodrg

    Vanguard Scout

  • Members
  • 151 posts
  • Guild Tag:[TOR]
  • Server:Sea of Sorrows

Posted 11 October 2012 - 08:32 AM

[quote name='st0rmie' timestamp='1349909465' post='2009701']
What? No you don't. You only need to do that if you forget to unlink the authenticator before you sell/trade/return your old phone.

Unlink authenticator using app on old phone; switch phones; re-link using app on new phone.

Certainly it would be nice to have a physical option as well as the iOS/Android/WP7 apps, but this problem you describe is not really a problem.
[/quote]

its not just upgrades tho, phone getting stolen/lost/broken all cause this problem... upgrading is just the more common. Plus since ArenaNet wants us to play how much we want, quit, then come back. People may forget they had this authenticator attached to their account when they are taking a break from GW2

#27 solariz

solariz

    Asuran Acolyte

  • Curse Premium
  • Curse Premium
  • 70 posts
  • Location:Germany
  • Server:Abaddon’s Mouth

Posted 11 October 2012 - 08:51 AM

I just want to add this Good Article I found:


[b] Use Google Authenticator without the Phone[/b]


[url="http://www.labnol.org/internet/google-authenticator-for-desktop/25341/"]http://www.labnol.org/internet/google-authenticator-for-desktop/25341/[/url]
( My Char: Fallacia Nox )

#28 ThiaTheMuse

ThiaTheMuse

    Asuran Acolyte

  • Members
  • 117 posts
  • Location:Phoenix, AZ
  • Guild Tag:[Slam]
  • Server:Stormbluff Isle

Posted 11 October 2012 - 08:59 AM

[quote name='solariz' timestamp='1349945498' post='2010552']
I just want to add this Good Article I found:


[b] Use Google Authenticator without the Phone[/b]


[url="http://www.labnol.org/internet/google-authenticator-for-desktop/25341/"]http://www.labnol.or...-desktop/25341/[/url]
[/quote]

Cool! I still hope they have a key chain option, but this looks like it could be pretty handy. Thanks!

#29 Belechael

Belechael

    Pale Tree Seedling

  • New Members
  • 3 posts
  • Guild Tag:[Gr]
  • Server:Aurora Glade

Posted 11 October 2012 - 09:17 AM

Awesome then, anything for more security.

I'd hate to see something like what is regularly happening in WoW happen to us.

Edited by Belechael, 11 October 2012 - 09:18 AM.


#30 Tellia

Tellia

    Vanguard Scout

  • Members
  • 379 posts

Posted 11 October 2012 - 09:31 AM

its a step in the right direction. we can only hope more options become available once they roll out this and iron out the bugs in this app.





Also tagged with one or more of these keywords: arenanet

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users