I already use the Google authenticator for my personal email address account. When I scanned the QR code and the Guild Wars 2 code was added to the list, it said it was for my personal email address instead. So now I have two codes that say they’re for my email account and none that say they’re for Arena.net or Guild Wars 2.
And, of course I guessed wrong on the verification step and the QR code was reset. Now, after re-scanning I have THREE codes that say they’re for my email account. Which one in my list is expired and needs to be deleted? Which one do I use to verify the code works? Which one belongs to my email account?
(I finally guessed right and learned that the newer codes are at the bottom of the list and older codes at the top. This was entirely un-fun as I was threatened with being locked out of my personal email account if I had deleted the wrong one)
Also, please have your system expire “trusted” IP addresses / locations after 30 days.