Guild Wars 2

Can I give some hints for account security? I personally use the following…

• Create a new email address with random letters that is used nowhere else
• Create a password with random letters and numbers, again unique to this site/game
• Use the Mobile Google Authenticator (Currently in beta)

I did this because I have seen connection attempts to my account when I was using my normal everyday email address. With the above set I feel my account is as secure as I can currently get it.

I tried this authenticator on my phone… It’s ok. But what if I lose my phone?? Or if I want to login from somewhere and I don’t have my phone with me??? It sucks a bit. I think it can be somewhat inconvenient. Mail verification is better… but I need to do it every time I log in. From home too. So… it’s a bit annoying. But thank you for trying to protect us! I appreciate it! I think this email authentication is more than enough! Tnx!

p.s. good thing that mobile authentication is optional

I wrote in other thread, that I won’t continue supporting GW2 until the email authentication is gone. I was answered that I have to manually contact support to disable the authentication. Well, I am not going to ask to remove something that I didn’t ask to get in the first place. So, it looks like I won’t be playing GW2 ever again.

Hi.I have such a question.. are the support tickets monitored by real person or only comp.programs?

Hi I just bought this game online and I have not been able to play it yet. When I log in it says “The e-mail address you have entered was not found. If you have an active game account please try again. If your still having trouble, please contact customer support.” Can someone please help me?

I had someone try to log-in to my account from China.

I received the email (thanks) that asked me to change my password and that I could deny that person from accessing my account again.

This does not work. When I click “Deny Access” I get the following Error message:
Failure
An error occurred with your request.

This is the person’s info, please block them from accessing my account since I am not able to:
Address: 59.55.1.233
City: Beijing
Region: 22
Country: CN

Hello, I have two questions about the Two Step Verification:
Is it True that when i enable the Google Authenticator, my account loses the ability to use Email Verification?.
If that is True, How can i know if someone else know my password, and his only brick in the way is my phone, that can be stealed at any time?

I Feel that the Official app from google is very insecure, It doesnt Offer any way of “First Protection”, like a pin or something, At least in iOS Sometimes get resseted, losing all the tokens, its not fun. Also it Doesnt Work pretty well on an iPad.

My last question is: Do you know of an App that can be an alternative to Google Authenticator? Using the same Code of TOTP.

I want to add that the QR Code Doesnt Work.

And Please, PLEASE if the “Bots” or Hack is a real threat for Your Company, PLEASE Invest more time and space plublishing information about it, No-one of my guild knew about Two step verification until i told them.

Use incentives, like rewards, for example, more storage room (just 5 or 10 spaces) If you link your account with a Device. Promote the system on the front page, Offer alternatives, if you havent a smartphone, There are Open Source apps that work like an addon of the Web Browser.

Thanks

Not so much of a major issue right now, I actually prefer getting an e-mail asking me to authenticate a log-in from a different computer (attempt) as opposed to not letting me know at all.

I just found in my e-mail a computer in Zhengzhou (googled and apparently it’s in China) popped up asking me to authenticate. So I’ve deleted the e-mail and avoided clicking the links, right now I’m doing a system scan to make sure I don’t have a keylogger of any sort. How exactly are these people randomly finding the correct passwords to the right account though, is it just sheer random or are they adding us as friends and checking our identification code?

Why does “remember this network” not actually, y’know, remember this network? I get someone from China trying to log into my account every day, but of course never allow it. But it would still be nice if it remembered the place I do always allow access for…

I can’t buy gems again, what is going on with this?

I’ve been playing Guild Wars 2 without any problems for some time now, but this morning when I tried to login to my account, the launcher showed a message saying “Waiting to authenticate log-in attempt”. This was easy to fix, all I had to do was go to my email and click a link.

However, I have logged in several times today and it has asked for authentication every time. My email says it believes I’m trying to log in from Berkeley, which isn’t right. I just want to be able to type in my info and play the game without having to go into my email and authenticate that it is indeed my account. I hope this can be easily fixed! Thanks in advance for any advice!

i have recently started using a mobile authenticator for my account and i have started to get worried about what would happen if i lost my mobile phone, how can i get back into my account without the authenticator code?

If you didn’t write down the secret key. I think you can remove it and try to link one again. Just remember to write down/print out the key. Once you have the secret key you can get your code again.

It would be good if we can print out the key through account though.

Hey guys,

So every time I go to log in I have to authenticate my account by going into my emails and clicking the link. It’s saying i’m logging in from a different IP address.. which i’m not.

It’s the same computer that I set up on and will forever play on. Is there a way to change the default settings or something so I no longer have to keep doing that?

Cheers

When i Logged on forum with my another pc. “An error occurred with your request”… when i allowed access to second pc.. Also checked my mail and occurred trouble again..

Help me plz, with thanks Eugene.

I am sorry if this is a repeat question- I have a dynamic IP, it always changes. I don’t mind the emails.
I logged in now and had no email verification and I KNOW my IP has changed, how can I make sure I am still signed up for this???

I see NOTHING in account but the option for notification by phone (which is inconvenient for me). Please assist and TY.

I live in Australia, never bought gold from gold farmers because that’s just plain stupid. Got an email today saying this.

A log-in attempt from the following location is currently awaiting your authorization.

Address: 222.244.242.157
City: Changshahsien
Region: 11
Country: CN

This location is approximated based on information provided by your Internet Service Provider. If in doubt, deny the request and try again.

If you are certain this log-in attempt was not made by you, then someone else knows your log-in credentials and you should change your password immediately via Account Management.

For security purposes, we alert you each time your account is accessed from an unrecognized location. To authenticate this log-in attempt, please click the link below:

[link deleted]

Need help or have questions about your Guild Wars account? Visit our support site: [link deleted]
Thanks!
—The ArenaNet Team

Is there a hacks team I have to forward this email to or something? I’m about to change my password as well.

Change your password
Link your account to authenticator ( remember to write down the secret key for future reference )

Oh, I didn’t know there was an authenticator. Thanks mate.

Do you think this forum post would be enough to notify them of a gold farmer or should I send an email directly.

There isnt much your info can do since they can mask it with VPN easily. The most important thing is to protect your account.

I also received the same e-mail. Changed my password and all as soon as I saw said e-mail; doubt anyone got in since I was playing around the time the e-mail was received.

About the authenticator: Is there an FAQ regarding how to link my account to one? Is there an official GW2 authenticator I can use/buy?

…Do I need to start being paranoid and taking scree caps of my inventory before I log out? (which would be a pain since I have 4 characters I play regularly.)

Thank you.

@Valintine

There is smart phone app ( ANet use Google Authenticator ). If you don’t own a smart phone, you can download the desktop java app from https://github.com/mclamp/JAuth/downloads

It is easy to add the authenticator as follow
1. Download the app to your phone ( or the java desktop app, do not install the java desktop app till you are ready and have security key GW2 gives you, read the detail below )
2. Log into your GW2 account from official site.
3. Click on “Security” and link the authenticator
4. Launch the app ( or, in Java
Scan the QR code or type it in manually. I recommend write down the security key and put it somewhere safe ( In Java app case, you can now install the app and type in the security key )
5. The website will now ask you to put in a one time code to verify you have the right key entered. Once verified, your account is now linked to authenticator.

Does anybody know how to recover your account if your phone gets lost/broken? Google has recovery passwords that you can write down and save elsewhere for cases where your phone is hosed, but I can find no list of recovery passwords like that for Guild Wars 2.

Dropbox and Lastpass use Google’s native authenticator as well, and they have a recovery option available. Unfortunately it simply circumvents the authenticator and lets you log in without it, which makes the whole exercise pointless.

To the guy who had the idea to write down the secret key: thanks. It’s a great idea, but it does require you to get another phone (since yours fell in a pool), install the app, and run the key to recover your account.

So, Anet, please put a recovery number in the security tab of account management.

Hello. I just logged in GW2 and I had mobile authentication system linked on my account. This time it didn’t ask a code to verify it’s really me. Did this newest patch broke that system and made it bypass the code and are you already aware about this issue? I think it’s good to have this extra verification so I’m a bit concerned about this bug :/

Hi, I have a question regarding the mobile authenticator. If after I have downloaded the mobile authenticator and some time in the future I changed my phone to a different model that doesn’t have the app, how would I go about getting a new authenticator that is linked to my old one? Basically, what I’m asking is if I changed my phone to a new model that doesn’t have an authenticator, how would I log in?

Same problem here with the mobile authenticator. When i set it up on my iphone it dosent accept the QR code. But i did manage to set it up somehow, now it dosent ask me about the code either while i try to log in game or website. IT is showing on my account page under security tab that i have the mobile authenticator attached. But it dosent do anything

I have a little concern about the new “remember the network” feature. Say someone got hacked then recovered his/her account then put the auth up. We’d have to assume the thief actually made it into the person e-mail and accepted a new location to then get in before the auth was set up. Wouldnt it put the thief into “remember this network” too ? If so…he just need to get your info again and the auth will just let him get in again…or am I wrong?

Let me start out by saying that I am very grateful for the email authentication. My Guild Wars 2 Account and my email have almost been compromised. My question here is how much I should be worrying about this. I set up a phone verification for my email and changed both my passwords for Gmail and Guild Wars 2.

Here’s the part that confused me. The Gmail notice came about 2 weeks before the Guild Wars 2 account. This gives me mixed feelings about whether they did this for the GW2 account or for my Gmail account. Any thoughts on what I should do or why this happened? Anyone recognize this IP or have this happen to them?

-Edit-
After reading the forum a bit more I discovered lots of threads like this. What’s with all the attempts from China?

Email from Guild Wars 2:
A log-in attempt from the following location is currently awaiting your authorization.

Address: 111.162.41.127
City: Tianjin
Region: 28
Country: CN

Email from Gmail:
Someone recently tried to use an application to sign in to your Google Account,
—————-@gmail.com. We prevented the sign-in attempt in case this was a hijacker trying to access your account. Please review the details of the sign-in attempt:

Monday, October 22, 2012 8:00:25 AM GMT
IP Address: 118.72.20.75 (sx.cn)
Location: Datong, Shanxi, China

Just happened to me a few minutes ago… thank goodness for email authentication. I just changed my password to something a lot more complicated. Let them try it again

Game is not asking for Authenticator code anymore after yesterdays update.

Chik En.8973:

Game is not asking for Authenticator code anymore after yesterdays update.

Im having the same problem

http://www.guildwars2guru.com/news/879-remember-this-network-for-authenticator-users/

This might be why it’s not asked, if you log in from “secured network” which has been remembered by email authenticator.

Is this suppost to be fun?
I love the security, but every time I want to log in the game I have to click a link to my email.

Every time I want to sign in to the forums, I have to click an email.

It works fine for me.

Do you select the option to ‘remember this network’ when you’re in the verification page?

Yesterday, I successfully added a Mobile Authenticator to my account and I verified that an MA is linked to my account. I just got my account restored after a false ban, but I logged-in normally without getting any prompt for any MA code!?

I’ve used MA’s for many other games and they always ask me for a code upon login. Am I missing something?

New.6590:

Chik En.8973:

Game is not asking for Authenticator code anymore after yesterdays update.

Im having the same problem

Same here. I have un-linked an linked again, no joy. Website nor game is requesting codes.

rogueprocess.2614:

New.6590:

Chik En.8973:

Game is not asking for Authenticator code anymore after yesterdays update.

Im having the same problem

Same here. I have un-linked an linked again, no joy. Website nor game is requesting codes.

That would be great if it were the case (for me at least). I get the emails right away – and clicking the link only gives me a ‘Failure’ screen regardless of what I do. So I can only access the website or client from my work computer – which kinda defeats the purpose.

Seems like it’s sending way more emails than attempts as well – but they are all from my correct IP. However, just like it was a month ago – it doesn’t work at all. On top of that there is now no longer a way to disable email authentication – yay!

rogueprocess.2614:

New.6590:

Chik En.8973:

Game is not asking for Authenticator code anymore after yesterdays update.

Im having the same problem

Same here. I have un-linked an linked again, no joy. Website nor game is requesting codes.

Same deal here, it started with the most recent update. I believe it was the one that took care of the phantom Candy Corn nodes. Since then the game has not requested a password from the mobile authenticator app

So, the game launcher is supposed to ask for an Authenticator code upon login, but it is not asking for it atm?

After the official post that our accounts were still secured with the authenticator even when it doesn’t prompt for the code any more because of the “remember location” feature that was enabled on our accounts I am still able to access my account from a totally different IP and location. Another friend with the same problem in a different part of the country also was able to do this. I think that if Arenanet thinks that these accounts are still secure they are wrong in doing so. If a security feature like this can go down just because of a small patch to something not even related then they need to give us the option to turn back on Email verification until all the bugs are worked out. I would rather deal with the hassle of that then loose my account when it’s not even protected.

I also un linked my authenticator, linked a new one and did the same test with still the same results

Treplos.5182:

So, the game launcher is supposed to ask for an Authenticator code upon login, but it is not asking for it atm?

Look a couple of posts above you.

Rautaketju.2438:

http://www.guildwars2guru.com/news/879-remember-this-network-for-authenticator-users/

This might be why it’s not asked, if you log in from “secured network” which has been remembered by email authenticator.

On November 6th, they implemented their ‘remember this network’ protocol. So, if you selected remember this network, it won’t ask you for an authenticator code any more if you’re logging in from a remembered IP.

As a side note, if you selected ‘remember this network’ for the e-mail authentication, it’ll automatically apply it to the mobile authentication as well. Since I’d already authenticated my home computer via e-mail last month, it just assumed that I wanted it remembered for the mobile one as well.

Everything is still working and you’re still protected. You’re just not required to enter a code anymore if you’re logging in from a trusted environment.

Ok, so I tested the “Mobile Authenticator” further and it seems that it works for new networks. However, I do not get a notification for the “Email Authenticator” any longer.

I thought “Mobile Authenticator” was meant to add an extra layer of security on top of “Email Authenticator”, or is it intended to replace it?

Any clarification would be appreciated.

I am trying to set up my mobile authenticator, but when I try to identify the barcode, the app gives me an error, stating that the code is invalid. This was pointed to quite some time ago, already, by several users, but we never got an answer on that. Still not working anyway. Sorry, but I am not going to use an authenticator until it’s pretty clear that it is solid and error proof at least at setup phase!
Thanks of the great overall work, anyway.

I just had a problem with email authentication not sending me any emails so i could login to the game. This has happened to me before at least 2 times and the emails eventually came but much later. Ultimately i had to disable it so i could play. It would be nice if this could be fixed so that the emails arrived in a timely fashion.

please let me remove the e-mail autenticator I have a dynamic IP and is annoyng autenticate it every time =(

I tried to unlink “google authenticator” by going to account recovery, since my iphone was swapped by apple. After entering the required info including my email address, serial number and a charactor name, there were 2 buttons available: “reset password” and “unlink authentication”. However, after clicking on the unlink and confirming, I got a message" there’s been an error, contact support". I repeated the process several times, the same result.

I just got this email from you

[i]A log-in attempt from the following location is currently awaiting your authorization.

Address: 180.1.95.239
City: Tokyo
Region: 40
Country: JP

This location is approximated based on information provided by your Internet Service Provider. If in doubt, deny the request and try again.

If you are certain this log-in attempt was not made by you, then someone else knows your log-in credentials and you should change your password immediately via Account Management.

For security purposes, we alert you each time your account is accessed from an unrecognized location. To authenticate this log-in attempt, please click the link below:
[/i]
I changed password ofcourse.
Are there any known keyloggers for this game. My AV never found anything. Ifthere are keyloggers for this game then nomatter how many times I change my PW it will still be send to them.

Also, is it possble to allow only login from a certain IP and nowhere else? It’s not like im moving to another country.

Not sure if this is related to my issue (which I will be posting in the Blocked/Suspended/Terminated — Player Comments thread), but my ticket was recently updated with account information from someone else’s account. Seeing as I have no access to their actual email account, it makes no difference to me, but I was given a working email address and reset password for this other person’s account. Perhaps this is what happened in your case, where someone else was given your account info.

@Lelo
I am not aware of game specific keylogger. I think if your account is compromised, you need to find out how that happens. A lot of virus/keyloggers are not detected by AV and it also depends on what kind of AV you have installed.