lol worrthy Enhanced Login Security for FINAL FANTASY XIV

[Cooleko]

http://lodestone.finalfantasyxiv.com...2a0cae82881b5f

Dear Valued Square Enix Customer,

Thank you for using the Square Enix Account Management System.

Based upon recent suspicious activity, we have identified that your account may potentially be at risk. For your protection, we have temporarily suspended login access to this account.



And all we could hope for is they used a little intelligence. I logged out, reset my IP address to resume a megavideo movie. an hour later (after movie ended) attempted to log in and they flagged me... GG SE, way to only compare IP addresses. What now? every time someone with dial up logs in they need to reset their password?

TL;DR they are comparing IP addresses so if you do not have a static one use the token.

[Sephiroth]

This is going to piss me off, along with most UK players. It's quite common here to have fast broadband with a dynamic IP that changes every time you reboot the router, nevermind dial up. Forcing people to change their passwords so often tends to lower security as they end up using weaker passwords so that they're able to remember them.

[Cureslime]

I thought the enhanced login security was just a ploy to stop account sales honestly...

[Vuitton]

Why are people not using the token? I've been using it since release day, and I have one on my WoW account, and my Gmail account. Takes about an extra 3 seconds to log in and protects your account.

"hurrp durrp you can still get hacked even with a token hurrrr"

Yeah, maybe if someone really wants your specific account and is willing to hack it in real time as you log in, and you'll be aware of it immediately as you'll get booted off. Otherwise, it is protecting you against most attacks. There is a reason why Blizzard, Square-Enix, Google, and various banks are recommending these.

Now it has the added bonus of prevent a dynamic IP from disabling your account. lol

[Corrderio]

Wow, I can only imagine the backlash that will cause. Wonder how people that share accounts are going to react?

[Nevex]

Why would anyone steal a FFXIV account again?

[Corrderio]

You realize this system is in XI to right?

[sruon]

The day they propose a token application maybe I'll bother relinking.

[Sephiroth]

Why are people not using the token? I've been using it since release day, and I have one on my WoW account, and my Gmail account. Takes about an extra 3 seconds to log in and protects your account.

Why should I have to use a token? My e-mail account doesn't use one and I'd have far more to lose if someone gained access to that than my FFXIV account. I'd have to do something stupid like download a bot that comes with a key logger to have someone get into my FFXIV account.

[Vuitton]

Why should I have to use a token?

I know the hassle is overbearing for you. Good thing it isn't mandatory. You either do or you don't. Don't bitch about the choice you've made, seeing as you can change your choice so readily.

[Chimerawizard]

My key broke off and got lost on my ffxi account, it was way more pain to get access back than the key was worth.

[Sephiroth]

I know the hassle is overbearing for you. Good thing it isn't mandatory. You either do or you don't. Don't bitch about the choice you've made, seeing as you can change your choice so readily.

I'm not bitching about it, I'm answering your fucking question.

[Spider-Dan]

WTF does using a token have to do with an IP address change?

This is the wrong thread for token zealotry.

[solracht]

This new security feature is not active if your account has a token attached.

-How to avoid the login restriction:
Using a Square Enix Security Token will prevent any login restrictions from being placed.

So I'd have to disagree with this being the wrong thread.

[sruon]

Logged out 12 hours ago, received my new modem for my new ISP, tried to log and I got locked.

Square Enix Account Management System
http://account.square-enix.com/
-------------------------------------------------------

Dear Valued Square Enix Customer,

Thank you for using the Square Enix Account Management System.

We are writing to inform you that we have temporarily restricted access to your Square Enix Account. This was done for your protection as unusual access to your account was detected on our system. For your protection, we have temporarily closed the account.

In order to remove the restriction, please do the following:
1.) Please refer to the following FAQ to ensure that your account is secure.
http://support.eu.square-enix.com/j/kb56818gb

2.) Please visit the URL below to reset your password.
https://secure.square-enix.com/account/app/svc/

*If you cannot access the page by clicking the URL provided above, please copy and paste it into the address bar of your web browser.
*The URL provided above will expire one week after receipt of this e-mail or once the password has been reset successfully.

For more details about the login restriction, please refer to the following page.
http://support.eu.square-enix.com/j/lbgb

-------------------------------------------------------
Please forward your inquiries regarding the content of this e-mail to the Square Enix Support Centre.

http://support.eu.square-enix.com/main.php?la=2&id=612
-------------------------------------------------------

The mail is instant, changing password takes 10 seconds... just can't use previous one

[Sephiroth]

changing password takes 10 seconds... just can't use previous one

Oh lovely, way to go SE forcing people to use lots of weak passwords rather than one secure password that they have memorised. My university did this, forced people to change password every 90 days and didn't allow previous ones, I ended up keeping it in my currently opened Notepad file because fuck trying to remember a secure password only to have to change it again shortly after.

This sounds ten times worse, because now I have a forced password change every time I reboot my computer if what you guys are saying is true with IPs. The same will be true in a lot of cases, which is going to result in people using weak memorable passwords or people making a note of them somewhere.

Companies need to learn that forcing extreme security measures actually lowers security. It's alright saying the solution is "SE is forcing you to use a security token", but not everyone has a security token and it should not be forced.

[Rajwa]

Why are people not using the token? I've been using it since release day, and I have one on my WoW account, and my Gmail account. Takes about an extra 3 seconds to log in and protects your account.

Some people, like myself share accounts with other people. I bought the token and linked 4 accounts three of us used. The main reason was to get the satchel, as inventory was a pain in the ass at that time (especially for all 75's). After that I deactivated it, wasn't really possible to share a token between three people and none of us really needed or cared about the extra security.

inb4 "you're gonna get hacked with that attitude". I heard that when the token was first released, and none of us have ever got hacked. Protip: education is greater than any form of physical security device.

Anyway, I actually had experience with this "enhanced login security" today. It only took a couple seconds to finish, so its really no big deal. If you really want to know annoying, SE use to require you to send a notary along with information like a photocopy of your game codes, and if you are outside the US a copy of a photo ID. It would usually take a week to process before they would e-mail you informing you how to reactivate your account. There was a month where our accounts kept getting locked because of "suspicious activity", 99% of that time waiting for them to receive snail mail.

[sruon]

Oh lovely, way to go SE forcing people to use lots of weak passwords rather than one secure password that they have memorised. My university did this, forced people to change password every 90 days and didn't allow previous ones, I ended up keeping it in my currently opened Notepad file because fuck trying to remember a secure password only to have to change it again shortly after.

This sounds ten times worse, because now I have a forced password change every time I reboot my computer if what you guys are saying is true with IPs. The same will be true in a lot of cases, which is going to result in people using weak memorable passwords or people making a note of them somewhere.

Companies need to learn that forcing extreme security measures actually lowers security. It's alright saying the solution is "SE is forcing you to use a security token", but not everyone has a security token and it should not be forced.

I forgot to mention, you can't use any part of your old password either, which is incredibly retarded.

[machiko]

This is going to piss me off, along with most UK players. It's quite common here to have fast broadband with a dynamic IP that changes every time you reboot the router, nevermind dial up. Forcing people to change their passwords so often tends to lower security as they end up using weaker passwords so that they're able to remember them.

You can use a password of abc if you like, if someone else gets it and uses it it will lock the account because the IP is different. That's the whole idea of the thing, doesnt matter how weak your password is.

You realize this system is in XI to right?

It's not actually, but it will be within the month.

Ultimately people are making a bigger deal out of it than needs to be, it probably takes as long to input the passord with the token as it does to change your password with the automated system anyway.

[Sephiroth]

I forgot to mention, you can't use any part of your old password either, which is incredibly retarded.

My uni did this too, so it wasn't even a simple case of incrementing a number. At least I don't reboot my computer daily, I keep it on for weeks so it won't piss me off as much as it will some people. I might enable the token just to keep my current password but I shouldn't have to.

Ultimately people are making a bigger deal out of it than needs to be, it probably takes as long to input the passord with the token as it does to change your password with the automated system anyway.

Well like I said, not everyone has a token. It's going to piss some people off forcing them to change their password each time they want to play. I know if my e-mail account, bank account or pretty much any internet service I use forced me to change my password each time I want to use it I'd change provider. If it's a chore to login, you lose interest in logging in. Not something the game needs right now.