Guild Wars 2

So in my account security screen on the gw2 website it says my authenticator is linked and gives me the option to unlink it. However I have logged into gw2 half a dozen times since I set it up, and it hasn’t ever asked me to give an authentication code.

Anyone else have this issued?

If your on an authorized network it won’t ask for the authenticator key.

Gaile Gray.6028:

Right. If you’re not moving around, your location is recognized and approved automatically.

And that is a fail implementation for mobile authenticator.

Gaile Gray.6028:

zbrkesbr.4173:

Gaile Gray.6028:

Right. If you’re not moving around, your location is recognized and approved automatically.

And that is a fail implementation for mobile authenticator.

No, it’s the way many authentication systems work. If you approve a location, then it is “white listed” and you are not pinged every single time you try to log in.

I asked the Security Team about this, and the auth system is still in Beta, but they are considering allowing the player to “opt in” for “ask me every time” in the final version. I imagine that you will choose to use the feature to set your mind as ease.

It should’ve asked every time from the beginning with “opt out” feature in final version. When people install mobile authenticator – they expect and are ready to enter code every time they log in game or site. For everyone else there e-mail authentication with “remember network” checkbox.

Yes it’s aggravating, and I too would rather be forced to enter my security code each time, but an alternative is to reset your IP address each time you sign in (to a different network), assuming you are able to do that, and granted most people can not. Annoying, yes, but it’s an option.

zbrkesbr.4173:

It should’ve asked every time from the beginning with “opt out” feature in final version. When people install mobile authenticator – they expect and are ready to enter code every time they log in game or site. For everyone else there e-mail authentication with “remember network” checkbox.

How do you know what “people” expect?
I installed the mobile authenticator to prevent anyone from a different city/isp etc. to log into my account. I expected to whitelist my IP mask once (like for example “whenever a login attempt comes from 93.112.. allow it” and never to be bothered by the thing again (I have a dynamic IP from a certain range). Instead, it asked me for the code every single time I logged in when it was first introduced. Not only I considered that highly annoying, there were multiple posts about how this should be changed. The way it is now is how I had expected it to be. If anyone needs a paranoia mode and wants to allow each attempt even from his own usual IP/IP mask, that is perfectly fine with me – I do not want that.