Guild Wars 2

Having been forced to disable authentication due to receiving emails 1½ hours after requesting them… Is there a way we can re-enable authentication in the future? It frankly seems ridiculous that we’re forced to make an at this point irrevocable change for the worse to our account security in order to play the game.

Also, some clarification of this “new authentication method coming soon™” would be in order; does it require additional payment? What is the timeframe? Weeks, months? Right now alot of us have been forced to sacrifice security measures for usability; it only seems fair that we’re given information, seeing how your past track record for security is slightly sketchy.

I’ve never had the validate email ever work. Each and every time I log in I get the validate your email crap. I click the send email button, check the email and the link is always invalid.

Failure

The link you clicked is expired or invalid.

I tried changing the email today and the validate email is still invalid. I have no problems playing though.

The odd thing is the email I get has “Activate your Guild Wars account” as the subject, which seems odd since the account is active and I can play just fine.

Thanks for creating a Guild Wars account!

You’re almost done-we just need you to confirm your email address by clicking the link below.

hxxps://account.guildwars2.com/verify?userid=<bunch of stuff>

Need help or have questions about your account? Visit our support site: http://support.guildwars2.com/.

—The ArenaNet Team

In Australia most ISP’s issue dynamic IP addresses. This new email authentication is enough to turn me away from your great game. I have to check my email every single time I play. I have to check email every time I log into the gw2 web site and if I try to reply to a forum thread I have to do it again even though my address hasn’t changed since I first logged into the web site.

Every now and then I receive this error when the forum asks me to authenticate email again;

“Login Error: Portal returned error: 42: {”error":42,module,line,“text”:"ErrTimeout"} — /var/www/forum/gw2/en/shared/bundle/ruby/1.9.1/gems/oauth2-0.8.0/lib/oauth2/client.rb:108:in `request’ — login_controller.rb 94 (fangamer:-1)."

This is crazy over the top security. If it looked at the geo location city and allowed anything from that city or even if it allowed anything from the network (as it says it does) rather than just the host address it would be better.

Allowing dynamic IP address users to “remember network” is BAD from a security perspective because you are remembering an IP address that will be someone elses in a few hours and the chances of getting the same IP again are almost none so it’s a waste of time and resources at your end. It’s great for all you Americans with static IP addresses but there are lands beyond the USA!

I’m tired of having to get into my e-mail every godkittentime in order to log into the game. WTF is going on with this garbage?

Why don’t you just validate from MAC address?

I’m also having the Dynamic IP problem where I have to authenticate every time I log in, even after clicking the remember this network box.

I’ve been trying to get through to support to correctly validate my email address for TWO WEEKS now. I have been told that validating my email address is optional. Well, now it won’t allow me to play the game because my email address isn’t validated.

When I try to change my email address to the correct one, it tells me that the email address is already in use. Yes, it is. BY ME. My accounts are correctly linked. My NCSoft Master Account is correctly linked. I get all of my GW2 emails to that account. I cannot get this through to Support’s heads. I’ve gotten several form letters that don’t even address the problem I’m having.

I cannot seem to get support to resolve this. I am now EXTREMELY frustrated and angry because now I can’t play the game AT ALL – it won’t let me log in because my email isn’t validated! The ticket # is Incident: 120901-014256.

Interesting…. login to my linked GW1 this afternoon also got sent a “verify” GW2 E-mail. Freaked me out until I realised it was my static IP with correct location etc and the right time for me to be in GW1. BUT I have already ticked the remember IP address when authentication was first offered.

I know it wasn’t anyone else as I was the only one home that can use the computer (aside from the 2 year old – and I was sitting beside him the whole time). This isn’t cool…. especially if you have a dynamic IP and think someone might be trying to hack a/c. Also had to verify on login to the forums. Does the “remember” button not do anything any more?

This has been very frustrating. My ISP issues dynamic IPs. I am required to verify every time I log in to the game or forum, even in the same computing session. My ISP issues dynamic IPs. Each time, the “confirm” page has correctly shown my city.

I’m having the opposite problem: I’ve never received any sort of an authentication email since the original verification during headstart (that I had to do about five times before it took). So now I’m sort of left wondering if it’s currently working for me at all.

I “worked around” it so that I was able to play by changing my email address to one of my alternate emails. But I don’t want my alternate email used – that email is a spam-dump address. I want my main email, the one that all of my NCSoft Master account games are under, and the one that’s subscribed to the forum.

And I probably posted my issue too late last night to get it noticed before today. As I mentioned in the other thread, I suspect that there is an issue with having used my main email for the closed beta before pre-purchase was available, and for some reason the system may not have released my main email from the closed beta accounts.

I don’t know why it’s enabled – and says that I enabled it when I didn’t – but it’s ridiculous as I’m on a dynamic network and don’t want, nor need to be checking my email and clicking a link every time I want to log into the game. How do I disable it? Thanks.

I would also like to know how to do this please. I use an @plaync account name, which combined with a linked email is currently more secure (imo, given the current state of GW2 and ArenaNets security failings). But since the patch I cannot log in because the new system won’t let me without a ‘valid’ email.

Prior to the patch I would just click play, but now that is grayed out.

This is day two of not being able to log in to the game.

Aye I’m getting the same problem. Yesterday I thought someone was trying to get into my account and changed by password until the penny dropped and I realised that the warning was coming when ‘I’ try to log into my account .

I have to approve the IP via the emails every day. OK not a massive burden but it’s certainly a mild irritating thing to have to do daily.

Would also like to be able to disable this feature. Is there an ETA on other Security options?

Would be nice if possible to do it by hardware rather than ip.
Even i’m getting sick of having to goto my e-mail everytime i reboot my pc or router.

Better still give us a mobile authentication prog.

XxTAFxX.6741:

Would be nice if possible to do it by hardware rather than ip.
Even i’m getting sick of having to goto my e-mail everytime i reboot my pc or router.

Better still give us a mobile authentication prog.

I read somewhere on here that the developers are working on a mobile authenticator. They were working on something in-house which they have now scrapped and are going with a ‘google authenticator’ whatever that means. Why can’t they just use the same thing wow/rift/swtor use?

Anyway… two days, unable to log in.

I appreciate Anet’s efforts to secure accounts but all these measures should be optional. I don’t want a simple login to become a multistep procedure with checking emails and fumbling with cell phones.

Now I need an Email verification to log into my account on your web pages.

Why we don’t have the option to use an authenticator app or buy one, I don’t understand why this is not a choice for customers.

Yeah the CS is nonexistent, I have has a few issues like this and just get a canned response usually not even to do with my issue.

Pretty disgrace for a AAA title (its not launch anymore) and definitely won’t be sinking more money here unless they step it up CS wise.

Not sure if any of you are still having trouble with this but, this is what I did –
The link should take you to a page about the authentication system. Scroll down the page and click the “Problems Receiving Authentication Email Please click here for assistance.” link.
It’ll take you to a page where you can either reset your password, or disable the authentication system for your account. I have no idea how to enable it once you’ve disabled it though.
http://eu.support.guildwars2.com/app/answers/detail/a_id/9192

Sadly the @ncsoft accounts (at least mine) are presented with a greyed out ‘disable’ button on that page, so that will not solve our problem. :s

Is this based on IP address? There are people with dynamic IP address and with this we would allow access to an ip address that later we won’t have. If it is not based on IP any idea why every time I turn on my internet it askes me to do email authorization.

A friend can’t login due to the Ip change bug (his ip is static) and doesn’t change but the game is trying to tell him it has and it’s not sending the email auth for him to fix.

He has been able to play but he had to disable the Auth email system how can this be reactivated for security and also that it sends the emails out that it should this has been only going on for him since the new patch.

When I click the ‘send email’ button in the ‘Validate Your Email Address’ section of the launcher, I do not receive any emails.

This is a brand new email address that is being used as my game email and I can definitely confirm that no filters are in place and the emails are not being put into the junk folder or anywhere else. I have trawled all my email folders and the authentication emails are definitely not there.

I still receive the emails from the ‘Guild Wars Team’ though.

I can still play the game perfectly but i’d rather get rid of this issue if I can.

Any and all constructive help gratefully received please

I’m suffering from the same thing, ever since they implemented the rigid authentication from 2 days ago, i get an email every single time my IP changes. This is REALLY annoying since my ISP changes all the time.

Before that, i wasn’t being affected.

I got this email three days ago, but it was an attempt coming from China. I changed my password immediately.

What I am confused about is that the help article explains that we should be able to Allow or Deny access whenever someone is trying to login to our account. The wording in the email sounded quite different though, it was: “For security purposes, we alert you each time your account is accessed from an unrecognized location. To authenticate this log-in attempt, please click the link below”. Well, I will not click on that link, as I don’t want to authenticate that person and am not sure if I’ll be able to deny that attempt via the url in the email. Basically it reads as ‘clicking this link will automatically authenticate this login attempt’. Is that how it works? If so, can the help article please be updated?

Also, the login attempt never displayed in the security section of Account Management. I manually went there to check for the attempt and change my password. Long story short: I don’t trust ANY links in emails. Please give us a way to deny attempts manually on our account management.

GaileGray.9587:

Iruwen.3164:

GaileGray.9587:

As a side note, I’m sort of surprised that the system would send to you for a dynamic IP situation, since the IP would still be in that same location. I had believed that an IP at 12.34.567.890 would be considered “the same” (geographically) as 12.34.567.9. So I rather believed that a player would not be asked to authenticate every time.

I can only speak for German users, but our biggest ISP (>10 million customers) allocates addresses from several completely different subnets on every reconnect.

Thank you for that insight, Iruwen. I was not aware of that.

Ummmm…. The US is like this too…. Static IP addresses are an optional service that cost extra money…. <.<

Almost every home user has a Dynamic IP address. This system is horrible because of that fact. The “remember this network option” should be disabled because of this fact. You are having people save random IP addresses that they probably won’t have next week, if they even have it tomorrow, and that they won’t ever have again. Even inside a statically laid out private network, IP addressed do NOT equal security…. It is mildly disappointing that ANet is unaware of this fact despite their otherwise amazing programming.

There should be some sort of system that registers the actual computer or the client rather than the IP address, such as whatever system Valve uses for Steam. I can log into Steam on my desktop and have to authenticate it then log onto my laptop from the same IP address 2 minutes later and have to authenticate that computer, but it remembers those computers, not the random number I was borrowing from my ISP at the time…. This is identical to the current system except for the fact that it remembers the computer rather than a random number borrowed from an ISP, which means it is both less annoying for users and potentially more secure, since you aren’t whitelisting number that don’t belong to you in the first place.

What the heck is going on? I had to completely disable email authentication just to log in. When I tried the link in the email I got it just said Failure. Email Authentication is totally bugged.

I have some concerns about your authentication. I have registered 3 IP total (there are all dynamic). 1 was at my home, 1 at my dorm room, and 1 at my friends house. We all have diferent internet service providers. Right now i am at some random house and the game client didnt even ask for authentication. How is this possible?

So I never move my laptop, but every single time I try to play or use the forums, I get the authentication sheninagans, always giving me the same IP that I was on the last time… Its starting to get annoying now :P

Having to go to my email every time I log in has gone way past annoying.
It’s not far from the point of being too annoying to even play the game any more…

Sigil Baram.8561:

Ummmm…. The US is like this too…. Static IP addresses are an optional service that cost extra money…. <.<

Almost every home user has a Dynamic IP address. This system is horrible because of that fact. The “remember this network option” should be disabled because of this fact. You are having people save random IP addresses that they probably won’t have next week, if they even have it tomorrow, and that they won’t ever have again. Even inside a statically laid out private network, IP addressed do NOT equal security…. It is mildly disappointing that ANet is unaware of this fact despite their otherwise amazing programming.

There should be some sort of system that registers the actual computer or the client rather than the IP address, such as whatever system Valve uses for Steam. I can log into Steam on my desktop and have to authenticate it then log onto my laptop from the same IP address 2 minutes later and have to authenticate that computer, but it remembers those computers, not the random number I was borrowing from my ISP at the time…. This is identical to the current system except for the fact that it remembers the computer rather than a random number borrowed from an ISP, which means it is both less annoying for users and potentially more secure, since you aren’t whitelisting number that don’t belong to you in the first place.

This. :/

I have a dynamic IP address. I also have internet that likes to die at any random, given moment, usually when it’s most inconvenient and likely to lead to my character’s death. Before the recent ‘tweaking’, I only had to validate once and it did actually seem to remember the geographical area, roughly, and never asked again. Since the ‘tweaking’, I have had to re-validate every single time.

I whitelist what I log in from, hoping it’ll finally map out a geographical area and stop asking me, but it doesn’t seem to be working. So in light of that, could you at least give us the option to see what’s been whitelisted and remove/revoke them once we no longer have those numbers? I seem to recall being able to do this on my NC master account, so it shouldn’t be too hard to implement here.

Barring that, I really would prefer a Steam like approach, where I validated individual PCs, with the option/ability to remove and revoke them at will. Even if it’s like Steam and ‘Deauthorize every PC except this one.’ As is, I have to whitelist to keep from being annoyed if I take breaks and log out, but I now have several IP addys that I may never have again authorized to use my account. If you’re going to be as strict with it as making me validate every single change, then I want control over the whitelist once I lose that address, please.

I don’t have a dynamic IP address and the authenticator keeps forgetting when I click the authorized network box.

I don’t mind authorizing a PC but do we have to do every single time we want to play the game? That will make me disable it if that’s the case.

everytime i log into my PC it ask me for authentication.

and it gives me different location every time i log in.

i mean from same computer!

this is seriously annoying

I recently discovered that I don’t have email authentication activated so I tried to follow these instructions:

“Here are the steps you should take to protect your account using the Guild Wars Account E-mail Authentication System:

1. Log in to Guild Wars or Guild Wars 2.
2. Click Send to send a validation e-mail to your e-mail address.
* You will be sent an email with a link to verify the e-mail address.
3. Follow the link in the email and select Remember this Network.
* Note: A link from us will lead to our domain, *.guildwars2.com. Do not click a link that leads elsewhere."

The problem is that I can’t find any “Send” button. I have checked at account.guildwars2.com and in the client but can’t find it.

Yeah same problem,every time i log in i have to authenticate.

Creep.1459:

Allowing dynamic IP address users to “remember network” is BAD from a security perspective because [reasoning]

This didn’t occur to me. I figured it was an issue with a dynamic IP when I was prompted to verify a second time. I hit “remember this address” in the hopes that it would resolve the issue somehow.

If we aren’t going to be allowed to disable this annoying security measure, I would like to clear the remembered IPs from my account.

Though I would much prefer that this security measure simply go away.

So… my internet went away for around 3 hours, then when it came back, it decided to change IP. I had email authentication on, so now I need to click that link from the email they sends me.

How long is the delay to receive that email? It has been around 20mins now and I haven’t received anything. It might just be me being impatient, but I would expect to receive the email faster, considering I need it to play and that the system sends it(or atleast I assume it’s automatic)..

Delay should be only seconds. Has always been for me at least. Usually after the notification that the email has been sent and I open my email, it’s already there.

maybe it’s in your spamfolder?

Yea some spam filters are a bit too efficient cleaning automated messages :P

Tosha Daydreamer.9251:

maybe it’s in your spamfolder?

I wish it was there. :/

For some reason my IP changes quite often, but i always get the email just seconds after.

Well then, I sent in a ticket. I’m probably going to miss a few days of daily achievements(Q_Q), unless there’s a miracle and I get a reply today..

Thanks for the replies.

I know there is a recovery link, but that would just desactivate the email authentication, which I want to keep for account security.

Don’t forget to “Remember this location” thing at the bottom when you’re done.
Happened to me today and everytime I signed in I needed to wait for an E-mail. -.-

What do I do if I keep getting authentication requests from another country? I have denied access but I keep getting new ones. Sometimes even on days when I haven’t played GW2 in days! I have changed my password, but is there something else I can do to keep my account safe?