Maintenance for the week of December 15:
· [COMPLETE] PC/Mac: NA and EU megaservers for maintenance – December 15, 4:00AM EST (9:00 UTC) - 12:00PM EST (17:00 UTC)
· [COMPLETE] Xbox: NA and EU megaservers for maintenance – December 15, 4:00AM EST (9:00 UTC) - 12:00PM EST (17:00 UTC)
· [COMPLETE] PlayStation®: NA and EU megaservers for maintenance – December 15, 4:00AM EST (9:00 UTC) - 12:00PM EST (17:00 UTC)

Should we have two-factor authenticators?

Knowledge
Knowledge
✭✭✭✭✭
Most major MMORPGs offer an authenticator app for your phone or even a physical authenticator. This makes me feel more secure and I like using them. Even some titles that wouldn't be considered "AAA" like RIFT and ArcheAge have these apps.

Should we have two-factor authenticator apps?
  • Samadhi
    Samadhi
    ✭✭✭✭✭
    ✭✭✭
    Have never owned a smart phone
    am interested by how they use such an app in interaction with the game
    could you clarify a bit what they do?
    "If you want others to be happy, practice compassion. If you want to be happy, practice compassion." -- the 14th Dalai Lama
    Wisdom is doing Now that which benefits you later.
  • Gythral
    Gythral
    ✭✭✭✭✭
    ✭✭✭
    They already use a 'crappy' two factor system,
    if your IP address changes to one not seen before, you have to go through the email 4 step:
    login
    wait for email
    open ticket to get email resent
    use code

    so a true 2 factor would be nice & probably cost ZoS far less than the CS needed atm
    Edited by Gythral on March 28, 2018 4:47PM
    “Be as a tower, that, firmly set,
    Shakes not its top for any blast that blows!”
    Dante Alighieri, The Divine Comedy
  • Knowledge
    Knowledge
    ✭✭✭✭✭
    Gythral wrote: »
    They already use a 'crappy' two factor system,
    if your IP address changes to one not seen before, you have to go through the email 4 step:
    login
    wait for email
    open ticket to get email resent
    use code

    so a true 2 factor would be nice & probably cos ZoS far less than the CS needed atm

    I'm not going to go into detail but the email system is a lot less secure than an actual authenticator.
  • devan0216
    devan0216
    ✭✭✭
    I would be pleased to use my existing Yubikey.

    As far as a phone app, it would- in essence- provide you with a string of numbers to enter at login. I don't know the tech behind it, but I used google authenticator for most 2FA a couple of years back.
  • Enemoriana
    Enemoriana
    ✭✭✭✭✭
    ✭✭✭✭✭
    Please, no. Don't have (need, want) phone that can use apps, and any physical items can be a huge problem in some countries.
    It's annoying enough that almost every time I log in profile on site, I need to wait e-mail because of dinamic IP.
    PC EU, @Enemoriana. Ru.
    Houses: Erstwhile Sanctuary as actual Dark Brotherhood Sanctuary, Hunter's Glade as werewolf tavern (downstairs), Strident Springs Demesne as adventurer's house.
    Wishlist: character slots, attunable stations (have 36/80 sets collected), molten war torte and white gold war torte recipes, Willowpond Haven, Kor and Hildegard houseguests, crown crates.
  • Knowledge
    Knowledge
    ✭✭✭✭✭
    It's strange that so many people in this thread don't want or never had a smart phone...
  • DocFrost72
    DocFrost72
    ✭✭✭✭✭
    ✭✭✭✭
    Knowledge wrote: »
    It's strange that so many people in this thread don't want or never had a smart phone...

    Not everyone can afford one.

    Onto the main topic: as an option, sure. Requirement? No thank you.
  • Enemoriana
    Enemoriana
    ✭✭✭✭✭
    ✭✭✭✭✭
    Knowledge wrote: »
    It's strange that so many people in this thread don't want or never had a smart phone...

    Because they don't need it?
    For example, I spend most part of my time at home, where I have computer. Phone is needed only for rare urgent calls, confirmation of orders/delivery in some stores and watching time when outside. Outside I don't use internet, I listen music on separate mp3 player, I take photos with separate camera, I read books on e-ink reader (more items, but thet will not discharge in few hours). Also I have tablet, one with attachable keyboard, it is just like small weak computer, only with touchscreen.
    Why do I need smartphone?
    PC EU, @Enemoriana. Ru.
    Houses: Erstwhile Sanctuary as actual Dark Brotherhood Sanctuary, Hunter's Glade as werewolf tavern (downstairs), Strident Springs Demesne as adventurer's house.
    Wishlist: character slots, attunable stations (have 36/80 sets collected), molten war torte and white gold war torte recipes, Willowpond Haven, Kor and Hildegard houseguests, crown crates.
  • majulook
    majulook
    ✭✭✭✭✭
    Knowledge wrote: »
    It's strange that so many people in this thread don't want or never had a smart phone...

    Maybe like me they live a life were they do not need smart phone, I have my PC, Tablet, Plum RAM 7 Rugged (non-smart phone). I live quietly on several acres in a rural area.

    As far as 2 factor authentication why? If for security, then why not also add a minimum 12 character password with the changing of passwords every 30 days, and no repetition of passwords?

    Its a game it should be relaxing.
    Edited by majulook on March 28, 2018 4:41PM
    Si vis pacem, para bellum
  • josiahva
    josiahva
    ✭✭✭✭✭
    Because I am so worried about someone accessing my ESO account...they might...do nothing useful with it at all. They cant access my bank account just because they log into my account, there is no money to be made for them here.
  • Turelus
    Turelus
    ✭✭✭✭✭
    ✭✭✭✭✭
    I won't discourage anything which keeps my account safer.

    They have some level of 2 factor authentication as said by others but sold devices we can link or smartphone authenticators would be a nice option.
    @Turelus - EU PC Megaserver
    "Don't count on others for help. In the end each of us is in this alone. The survivors are those who know how to look out for themselves."
  • Alcest
    Alcest
    ✭✭✭
    yea would be great, something like google authentiсator for example
  • Gythral
    Gythral
    ✭✭✭✭✭
    ✭✭✭
    clearly someone didn't see the word
    'crappy'
    in my earlier comment

    & there is no need for a second device for 2 factor using an authenticator, there are apps for PC (WinAuth) or Mac as well as smartphones

    Any system should be opt in and opting in turns off the current IP address based email system
    Edited by Gythral on March 28, 2018 5:37PM
    “Be as a tower, that, firmly set,
    Shakes not its top for any blast that blows!”
    Dante Alighieri, The Divine Comedy
  • TheRealPotoroo
    TheRealPotoroo
    ✭✭✭✭✭
    Anything would be an improvement on the current garbage authentication system that thinks changing your IP address makes you insecure.
    PC NA, PC EU

    "Instead of taking the best of the dolmens (predictable rotation), the best of the geysers (scalability based on number of players), and the best of the dragons (map location and health indicators) and adding them together to make a fun and dynamic world event scenario, they gave us....... harrowstorms." https://forums.elderscrollsonline.com/en/discussion/comment/6850523/#Comment_6850523
  • SheepdogPaladin
    SheepdogPaladin
    ✭✭✭
    As long as two-factor authentication is not mandatory, I have no problem with it being offered as an option for those who want such a thing. I personally have no need for it. If this is ever implemented for TESO, it must not be mandatory.
  • Knowledge
    Knowledge
    ✭✭✭✭✭
    As long as two-factor authentication is not mandatory, I have no problem with it being offered as an option for those who want such a thing. I personally have no need for it. If this is ever implemented for TESO, it must not be mandatory.

    You do need it though...
  • PlagueSD
    PlagueSD
    ✭✭✭✭✭
    Knowledge wrote: »

    I'm not going to go into detail but the email system is a lot less secure than an actual authenticator.

    Unless you use 2FA to access your email, then you're fine (gmail).

    That's how I roll.
  • zaria
    zaria
    ✭✭✭✭✭
    ✭✭✭✭✭
    josiahva wrote: »
    Because I am so worried about someone accessing my ESO account...they might...do nothing useful with it at all. They cant access my bank account just because they log into my account, there is no money to be made for them here.
    They is likely to deconstruct or vendor all your gear for one, might even delete characters just to be evil.
    Note that ESO has no way to roll back an account like they have in WOW so you would be back on level 1 if that happened.
    So yes some stronger type of authentication would be good.

    And no it should not be mandatory.
    Edited by zaria on March 28, 2018 5:43PM
    Grinding just make you go in circles.
    Asking ZoS for nerfs is as stupid as asking for close air support from the death star.
  • SheepdogPaladin
    SheepdogPaladin
    ✭✭✭
    Knowledge wrote: »
    As long as two-factor authentication is not mandatory, I have no problem with it being offered as an option for those who want such a thing. I personally have no need for it. If this is ever implemented for TESO, it must not be mandatory.

    You do need it though...

    Oh?

    And how is it that you know what I need or don't need?
  • Prof_Bawbag
    Prof_Bawbag
    ✭✭✭✭✭
    ✭✭✭
    Knowledge wrote: »
    It's strange that so many people in this thread don't want or never had a smart phone...

    Can only speak for myself. Whilst i do have a smart phone, I very rarely use it. Why? Because when push comes to shove, most are simply a lump of useless plastic in my experience and I've been through a lot of makes (Sony, Apple, Samsung, the usual manufacturers).

    I do a lot of hill walking here in Scotland and step 3ft outside of civilisation and smart phones cease to work. It's a dead weight i could do without. Instead I use a trusty old Nokia that keeps its charge for 2 weeks at the very least, is very robust when dropped or bashed and actually works 3ft outside of civilisation. Call me old fashioned, but it's also a lot better doing what a phone was primary once created to do, make a damn phone call. Not everyone has a charging source on tap, not everyone lives in an urban area or an area that has ample coverage and so on.

    Something i learnt years ago, never assume everyone's lifestyle and circumstances mirror that of your own. Once you realise that, you'll stop assuming your life is representative of the majority.
    Edited by Prof_Bawbag on March 28, 2018 5:45PM
  • Aebaradath
    Aebaradath
    ✭✭✭✭✭
    I'm not gonna spend $400 on a measly phone to just to make some calls or send texts just because it has a shiny touch pad and it's the "best new thing" of the year.
  • Knowledge
    Knowledge
    ✭✭✭✭✭
    Knowledge wrote: »
    As long as two-factor authentication is not mandatory, I have no problem with it being offered as an option for those who want such a thing. I personally have no need for it. If this is ever implemented for TESO, it must not be mandatory.

    You do need it though...

    Oh?

    And how is it that you know what I need or don't need?

    Because whether you like it or not there are security threats out there that make having a 2FA something everyone needs on the basis of vulnerability.
  • Ley
    Ley
    ✭✭✭✭✭
    As long as it's optional, I don't care. I don't like to jump through hoops when logging onto a game.
    Leylith - MagSorc | Leyloth - StamPlar | Leynerd - MagPlar | Leylit - StamBlade | Ley Eviticus - StamDK | Leydor - MagDen | Leylum - StamSorc | Leylux - MagBlade
  • Knowledge
    Knowledge
    ✭✭✭✭✭
    I'm not gonna spend $400 on a measly phone to just to make some calls or send texts just because it has a shiny touch pad and it's the "best new thing" of the year.

    They usually sell a physical authenticator for $20.
  • Aebaradath
    Aebaradath
    ✭✭✭✭✭
    Knowledge wrote: »
    I'm not gonna spend $400 on a measly phone to just to make some calls or send texts just because it has a shiny touch pad and it's the "best new thing" of the year.

    They usually sell a physical authenticator for $20.
    I'm still not going to get one. If people want to use a two-factor authenticator, then by all means, more power to them. Add it as an option.

    I'm perfectly fine with the way it is now.
  • Tasear
    Tasear
    ✭✭✭✭✭
    ✭✭✭✭✭
    Probably not worth the inconvenience.
  • NewBlacksmurf
    NewBlacksmurf
    ✭✭✭✭✭
    ✭✭✭✭✭
    Those aren't usually nice.....the Bnet one is really nice but the Google one I'd rather stab myself than to use it again. Removed from my account in another game. ZOS has their own IP thing that works pretty good, requiring you to enter a code if you log in somewhere else.....that has proven to be more user friendly for me than other processes.

    Edited by NewBlacksmurf on March 28, 2018 6:10PM
    -PC (PTS)/Xbox One: NewBlacksmurf
    ~<{[50]}>~ looks better than *501
  • jedtb16_ESO
    jedtb16_ESO
    ✭✭✭✭✭
    ✭✭
    it's fine as it is.
  • Gythral
    Gythral
    ✭✭✭✭✭
    ✭✭✭
    it's fine as it is.

    No it is not, it is better than nothing but only just, but I guess those than think otherwise have no clue how laughably easy it is to get compromised
    “Be as a tower, that, firmly set,
    Shakes not its top for any blast that blows!”
    Dante Alighieri, The Divine Comedy
  • ZiRM
    ZiRM
    ✭✭✭✭✭
    Retinal scanning to login would be awesome. :p
    Want to become Vampire? 5k @ZiRM in game.
    ESO Server Status. ( ^_^)o自自o(^_^ ) SkåL!!!!!
Sign In or Register to comment.