NCSoft - 2 Different Log-Ins? Why?

JimmyNeutron

Krytan Explorer

Join Date: Sep 2007

I finally got my password resetted today and notice there are 2 [email protected]://us.ncsoft.com/en/ website

1st Login: Upper right hand corner, if you click on "Log In", this will grant you access to your NCSoft Master account

2nd Login: Click on "Support"-->"My Stuff", this will grant you access to Customer Support.


So why is there two different type of logins on the same site? That would mean I would have to secure my NCSoft Master account and my Customer Support account with a hard password since the 2nd Login also contains ALL open/closed cases I have ever open, including password resets where GW's customer support team ask you to email them ALL your game access keys to verify your identity.

If someone breaks in using the 2nd Login that is used to submit help tickets, they will gain access to any information you have provided GW's customer support with. This means access keys, address, dob, etc... that GW's customer support ask when you forgot your NCSoft's Master account username/password.

king swift

Krytan Explorer

Join Date: Jan 2007

Kamadan AD1

Zealots Of Shiverpeak [ZoS]

D/A

That is an interesting point. I have not thought about the two logins as a potential

security risk. The reason they have two logins is because one is to control your account

options and one is to contact support. If you forget your password to your NCSoft

account, there still needs to be a way to contact support. Thus they made it separate.

My advice to you delete anything in your "My Stuff" if you feel it is a risk.

I agree the whole thing is a mess, but yet again isn't Anet and NCSoft one big mess?

bsoltan

bsoltan

Site Contributor

Join Date: Dec 2005

UK

[SoF]

It's possible that support is operated by a different branch of NC Soft and they have their own database setup to keep it separate from the store. A bit annoying but coming up with two secure passwords isn't too big a job really.

JimmyNeutron

Krytan Explorer

Join Date: Sep 2007

Quote:
Originally Posted by king swift View Post
That is an interesting point. I have not thought about the two logins as a potential

security risk. The reason they have two logins is because one is to control your account

options and one is to contact support. If you forget your password to your NCSoft

account, there still needs to be a way to contact support. Thus they made it separate.

My advice to you delete anything in your "My Stuff" if you feel it is a risk.

I agree the whole thing is a mess, but yet again isn't Anet and NCSoft one big mess?
I understand this part. However, when you log into the account to contact support and request a password reset, Support will ask you for ALL access keys, First name, Last name, DOB, physical address, etc... before they reset your NCSoft Master account.

Once the case/ticket is closed for the password reset, you can NOT delete anything under "My Stuff". If someone was to able to break into your customer support account, they could read your case/ticket for the password reset and gather all the personal information along with the access keys and have ANET send a password reset to a NEW bogus email address that the hacker have setup.

To ANET, the hacker provided all the access keys and personal info. Unknowning to ANET, the hacker copy and paste into the new support ticket all the information in the previous support ticket.


So, to use a different password for NCSoft Master account and Customer Support is a waste. Both password should be identical because if a hacker breaks into one and you've requested a password reset before, they will gain access to the other.

See my point?