Guild Wars 2

Stop telling me to change my password, I like my password, it’s unique, you have essentially wasted all my unique passwords and now I am forced to use a password that is not as strong. STOP telling me to change my password. I only log on to this game once every few months, to see if it has changed for the better, and all I get is “UNKNOWN IP” and “CHANGE YOUR PASSWORD,” it’s truly annoying, STOP.

Please Change Your Password.

It is security measure for your own good. Annoying or not.
Maybe we should stop ask people to show ID as wel when flying.

Forced change-password policies add little security (and might even be detrimental).
The more passwords you force people to use the lesser the quality of said passwords.

Humans can only remember a few and forcing multiple changes just leads to password re-use or using very, very simple ones.

The exception of course is those who use password managers (or have exceptional memory). However in these cases they are probably already using a unique & complex password in which case a forced change really is pointless unless gw2 had their servers breached.

Congratulations, you have just identified yourself as the perfect mark.

The system is setup to prevent people from using passwords that aren’t secure and/or are close to those seen in published lists of breached passwords. So if the system is telling you to change it, that means your account is at risk.

Change it and then you won’t have to worry about it again for ages.

They have stated this is not something they will change as it is too beneficial as a whole to the game.

In security there are 3 important variables: cost, ease of use and effectiveness. You may select any two.

I sent a ticket to ANet and they removed my IP verification, as I have a dynamic IP which changes every day

change your password

Feone.2683:

Forced change-password policies add little security (and might even be detrimental).
The more passwords you force people to use the lesser the quality of said passwords.

Humans can only remember a few and forcing multiple changes just leads to password re-use or using very, very simple ones.

The exception of course is those who use password managers (or have exceptional memory). However in these cases they are probably already using a unique & complex password in which case a forced change really is pointless unless gw2 had their servers breached.

^^ Mostly this.

It also leads to using the same passwords that you already used elswhere, and that
is the real problem in the internet .. not how “secure” a password is.

read also this :
https://www.guildwars2.com/en/news/mike-obrien-on-account-security/

Beldin.5498:

Feone.2683:

Forced change-password policies add little security (and might even be detrimental).
The more passwords you force people to use the lesser the quality of said passwords.

Humans can only remember a few and forcing multiple changes just leads to password re-use or using very, very simple ones.

The exception of course is those who use password managers (or have exceptional memory). However in these cases they are probably already using a unique & complex password in which case a forced change really is pointless unless gw2 had their servers breached.

^^ Mostly this.

It also leads to using the same passwords that you already used elswhere, and that
is the real problem in the internet .. not how “secure” a password is.

read also this :
https://www.guildwars2.com/en/news/mike-obrien-on-account-security/

They only ask people with weak security to change it. I have never once been asked by the game so it is not a problem of needing to change often as Eeone seems to think is happening. If you really think password spelt backwards is good, well best of luck.

Yargesh.4965:

They only ask people with weak security to change it. I have never once been asked by the game so it is not a problem of needing to change often as Eeone seems to think is happening. If you really thing password spelt backwards is good, well best of luck.

Yeah .. that also seems right .. i had only to change it once over 2 years ago i think.

I just also thought about some idiotic policies in our company where we have
to change passwords each months .. while on my / our webserver that is not
part of the AD i already use the same password over 15 years .. lol

My password manager is a notebook where i write it all down. once obsolete i just scratch it through with a black marker.

GW/Anet never asked me to change my password. I just change it once in a while by myself.