Q:
Account and mail, security.
A:
In this situation someone else knows both the password for my Guild Wars 2 account and the password for my email account, gmail or hotmail.
I have enabled two step login for gmail and for hotmail I have added one trusted computer. I get a sms sent to my mobile phone.
If someone logs in to my Guild Wars 2 account from any other location than I do normally they are sent a verification email. To be able to read the email and accept the log in they must log in to my email account.
If they do know both password, will they be able to log in, read and accept the log in when using:
Gmail?
Hotmail?
You said you enabled 2FA/TFA on your Google account, so the answer to your question is no. Because for them to be able to login to your gmail account, they need the 2FA/TFA code that gets sent to your phone via SMS or via the Authenticator software for iOS and Android based phones. Without it, they won’t be able to approve the GW2 new IP address email notification.
As for Windows Live Mail, yes, they can.
Regardless, you should change your password regularly – at random times. Also use no less than 16 characters, using your whole alphanumeric keyboard. Something like: JuAFaPO230*({@PKS#M$)opSnlakIy*(j:LKAaFSI@Y#)(*P!HfDN%AL;fkNn;O
You get the idea. (No, that is not my password anywhere :p )
Change your passwords. It’s unlikey, but possible.
Honestly, if they have access to your email, your Guild Wars account is the last thing I’d be worried about. They can lock you out of your email, and use “Account Password Recovery” from any site to gain access to anything you have an account on.