Should Zeni have an authenticator?

danno8

santhoranb16_ESO wrote: »

arena25 wrote: »

Reverb wrote: »

They semi-have MFA, requiring email verification when login is attempted on a client not previously associated with your account. Short of full dual-factor authentication on every login, what are you thinking is needed?

Additional ways to authenticate in the event your account is suspected of being compromised (i.e. fresh device log-in), but email is either not working or is compromised.

If your' unable to manage your security so everythings compromised, its super likely your phone is compromised too then because of the lacking user skills. You cant protect anyone 100% against himself, they need to learn from their faults.

ESO has enough security- if you manage to fail everything that user will manage to fail a sms authentication too by compromising his phone details.

Authenticator makes it basically impossible to fail a check since it is a check of both your phone and SIM card. In fact you can't even port to a new phone without getting the special backup code your authenticator app will generate and using that on your new device.

SMS check is not as good, since phone companies screw up and put through number ports all the time that are unauthorized.

This thread is strange to me.

OP: "Do you want an optional way for people to strengthen the security on their account?"

"No"

ADarklore wrote: »

Yet another... "people shouldn't be held responsible for their own actions" thing. If people don't want to secure their accounts, that's on THEM... if people want to do it voluntarily, that's fine... but forcing it on players to make up for those who don't want to take the responsibility of securing their own account... I do not agree with that.

Where did he say he was forcing anything? He says "add the ability to enable" and "offer incentives to activate". Obviously optional for those who want solid security settings.

Amottica

I have seen that they require a machine to be authenticated to play the game on it. I am not arguing against an authenticator though, just noting an observation.

Also, with or without an authenticator it is no excuse for weak passwords or reusing passwords.