2 passwords for GW...

Ok, here's my idea...

If GW had 1 password in the beginning and 1 b4 you create/delete/play a character accounts wouldn't ever...EVER be hacked + stolen. I was furious when my lil bro's acc got stolen. This is when I had the idea. Anyone else have the same thoughts?

/sign !!!

so one extra password to stop hackers? it might work but im not that sure about it. It would make hackers exert a bit more energy tho

meh it just be a pain. im not sure if it would help too much but whatever

/sign

Better idea: http://www.blizzard.com/us/press/080626-auth.html

I think its a great idea!

/Sign

Why not just make your current password twice as long?

Depends on what actually happened. If you downloaded something dodgy, get better security/don't download dodgy things. If you got a virus/hacked or something, get better security. Tbh, if the solution to your was as simple as upgrading security, then I don't particularly want to have to put in two passwords, especially when I swap chars alot to swap stuff around.

/notsigned unless there was a good reason.

How about

just make a secure email/pass

then don't be dumb about it and go and get yourself hax0red?

/notsigned
A lot of people won't even be able to remember a 2nd password, especially one that you might only need to use once a year.

/not signed because doesn't work.

Sorry, key loggers and spyware will get every password, you could have 10,000 different passwords and as long as you type it in. Hackers get it.

Make it optional...

It doesn't work. No matter how long a password is or how many you have. A common keylogger will steal it.

The reason to have difficult to guess passwords is, you guess it, difficult to guess, if you are in a public place, have a friend over or simply don't trust your brother. Make it difficult.

If someone can get your first password, they can most likely get your second.

Be more careful. Make a strong, brave password.

/notsigned. I dont even like entering my 1st pw.
Learn to make stonger passwords and stop downloading the porn.

As Arkantos said, if you got a keylogger, it doesnt matter how many passwords you use.

I think the best idea is:
1 password for normal gameplay.
Second password for password change, account editing and character deletation. You dont have to type second password often, so there is lesser propability that keylogger catch it.

/signed if you consider my idea ;]


@Edit. There is a nice security key in Tibia. Its called recovery key.
You get it when you create account and you have to write it down on a paper.
If your account is stolen, and hacker changed password and email adress, you can use recovery key to set new password and email adress in 1 second ;p

If only Anet would introduce some DNA identification.

...

I know about a suggestion about locking characters for a given period of time. That would at least keep the character safe.

/signed and add - second password should comes with an online screen keyboard that scramble its keys everytime you click on it.

I do believe something needs to be changed. I think the idea Blizzard had would be good.

/signed

I think more account security is in order, but I don't think this is the way to do it. Chances are, as others have pointed out, if someone gets your first password, they'll get your second as well.

Though if you modified the idea slightly, it might work. They could check your IP address. I think most of us usually play GW on one computer most of the time (I know I do) so if you have a 'home' IP address saved, you enter as normal. If you try to use the account from an alternate IP address, you have to enter the second password (that must be different from your main password) you created along with your account. That way, if you're at home, everythings fine and dandy. And unless the hacker is a friend or someone in your family that can access your computer (in which case your kind of screwed no matter what happens), they'd have to find out what your oft unused password is.

You could even expand on that idea and set up a list of IP addresses that are allowed to access your account (like your home desktop, your laptop, etc.) and make it so you never have to use the alternate password except for extreme cases. Then that way there's nothing that keyloggers or spyware can find, and they'd be locked out because they couldn't match your IP address, and they'd have no way of finding out about your secondary password because you never use it. And of course make there be an entry cutoff so you can't brute force your way in, either.

Account keys.

Even when you have 2 passwords, you should always have them handy. Plus I think in the case your account does get hijacked, you can give them to support and they'll let you reset the passwords for you.

I change my password every months, and use a random string generator that I made myself to give me a random 12 character string which I then memorize and use as a password.

Agreed - that is a better idea.

A second password will only add a minimal amount of security, at the same time as being confusing and inconvenient. A second password would only protect against a small subset of possible attacks. It will not protect against key-loggers and similar attacks.

/not signed