Two-step mobile/email protection?

DeltaForce64x · April 2017

I was wondering, are we ever going to get additional security features for our accounts? It wont hurt to have extra security, especially nowadays, one of my concerns my ESO account is connected to my Steam account because I own the game on Steam, plus its easier for me to purchase crowns on Steam, Steam is oftenly targeted by hackers and I worried about my ESO account, can they somehow access to my account if they breach my Steam account? Connected accounts are somehow vulnerable? Sure I have a good password, good Anti-virus and two-step is enabled on my Steam account, but you see I'm a huge paranoid when it comes to security of my accounts/PCs, I used to check my hotmail/MSN accounts at midnights back in day.

so my question is: Are we ever going to get two-step mobile protection? Many other platforms/games already have this feature
thanks in advance

@ZOS_GinaBruno

kendellking_chaosb14_ESO · April 2017

DeltaForce64x wrote: »

I was wondering, are we ever going to get additional security features for our accounts? It wont hurt to have extra security, especially nowadays, one of my concerns my ESO account is connected to my Steam account because I own the game on Steam, plus its easier for me to purchase crowns on Steam, Steam is oftenly targeted by hackers and I worried about my ESO account, can they somehow access to my account if they breach my Steam account? Connected accounts are somehow vulnerable? Sure I have a good password, good Anti-virus and two-step is enabled on my Steam account, but you see I'm a huge paranoid when it comes to security of my accounts/PCs, I used to check my hotmail/MSN accounts at midnights back in day.

so my question is: Are we ever going to get two-step mobile protection? Many other platforms/games already have this feature
thanks in advance

@ZOS_GinaBruno

You already have it when you log in from a new computer you get an email with a code to access the game.

Turelus · April 2017

Yup as above ESO has two factor authentication on your email (unless steam is different).

You can also add additional security to steam as well as your email. As long as you don't repeat passwords and keep them somewhat complex you'll be fine.

A good tip coming out recently is not to use full words or replace letters with numbers or symbols as encrypted password databases are being cracked with dictionary attacks now.

IronCrystal · April 2017

While I guess this is technically 2-Factor Authorization, most people don't trust authorization that comes from email, as often that can be accessed as well if you were hacked.

Phone notification is a lot more secure because they would have to have access to your physical device.

I am not too worried about the security of my account, but a phone authorization would be a lot more secure than the current email-authorization.

Turelus · April 2017

IronCrystal wrote: »

While I guess this is technically 2-Factor Authorization, most people don't trust authorization that comes from email, as often that can be accessed as well if you were hacked.

Phone notification is a lot more secure because they would have to have access to your physical device.

I am not too worried about the security of my account, but a phone authorization would be a lot more secure than the current email-authorization.

Well it depends how secure you are, as said in another thread.

You need my ESO password.
You need my email account password.
You need my phone (email auth).

So a number of levels on my account. None share a password, they're high characters, with reasonable breaks to stop dictionary attacks etc.

Duiwel · April 2017

NO thanks OP.

The only reason I play this game through Steam is so that I can actually just log in without having to re-type my password.

AzraelKrieg · April 2017

If sign in is attempted on an unknown machine, a code is sent via email. If that email provider has it, 2FA is a thing they highly recommend you setup so your account doesn't get logged in somewhere you didn't authorise. Steam has a 2FA option as well so it's highly recommended you take advantage of that.

TheRealPotoroo · April 2017

kendellking_chaosb14_ESO wrote: »

You already have it when you log in from a new computer you get an email with a code to access the game.

It's not new computer that triggers the authentication code email but new IP address, which is one of the most brain damaged security systems I've ever seen (I've had this argument already with Support). IP addresses can legitimately change frequently and are thus inherently unreliable for identification purposes. As it is, the current system is more harassment than security.