Boards›[ARCHIVED] Miscellaneous

When will 2-Step Verification be added?

Veroxid·7/1/2017, 6:00:32 PM·2 votes·454 views

Quite awhile ago Riot put "2-Step Verification" on their "To Be Added" list. Now, I understand if -- for some reason -- the legacy client was not able to support TSV. Now that the legacy client has been completely retired, could we please have TSV added as soon as possible? Google has it. Steam has it. Blizzard has it (and iirc, has even had it longer than Google). Hell, even Discord, which is just a chat system, has a TSV option now.

Yes, I know of the copy-pasted "guide" that Riot has to keep your account safe. It's the same guide that almost everything that has a password requirement gives out, so it's nothing special.

I know I can't speak for everybody, but I personally hope that adding a TSV system would be moved to the top -- or at least close to the top -- of the list. A strong password can only protect you so much, and (theoretically) a medium password with TSV has stronger security than a strong password without TSV.

I'm mostly bringing this up because I've had yet another friend -- who follows all the Riot password guidelines -- who has still had their account cracked into and subsequently permanently banned because the other person used bots.

10 Comments

Sand lord7/2/2017, 4:46:04 PM1 votes

So, how would two factor authentication stop someone from logging onto an account with the password and using bots anyways? Two factor authentication would only be used as an excuse from Riot to never investigate a compromised account because everyone has this idea that two factor authentication is the pinnacle of security. Two factor authentication would only prevent account sabotage if you needed to get out your phone every single time you logged in.

Blizzard's USB drive authentication thing would be more practical in preventing account sabotage due to a compromised password. Requiring a code essentially from a plugged in flash drive to login would prevent account sabotage due to a compromised password alone.