Boards›Announcements

In-client email verification

RiotMarowe·1/30/2018, 6:20:11 PM·37 votes·20,367 views

Hey League fam,

Your LoL account is valuable. Whether it’s time dedicated to playing games or money spent on skins and cosmetics, your investments should be protected. Our Player Support team works throughout the year to help return compromised accounts as quickly and painlessly as possible. This sometimes takes a while, which can be frustrating. We do our best to protect your account and prevent this from happening, but we could use your help.

Here’s where you come in! Verifying your email address adds a vital layer of security to your account and enables us to provide a faster route to recovering your account. A verified email address allows us to quickly send account recovery information if you have trouble logging in and identifies you as the legitimate owner of your account.

What does this look like for me? Starting with patch 8.3, you’ll be able to verify your email in-client (rather than visiting leagueoflegends.com). If you have an unverified email address, we’ll send you reminders in the League client with steps for verification. If you need to change the email associated with your account, you can do that too. These reminders will be sent periodically to unverified accounts throughout the start of the season. If you don’t get the notification, your email is already verified. If you don’t get the notification but still want to change your email, you can change it on leagueoflegends.com via the settings menu in the upper right hand corner.

Do I have to? Right now, this process is optional. We strongly recommend you do verify your email ASAP, but you can postpone the reminder for later. During this time, we’ll be adjusting for any unforeseen issues and ensuring we’re giving everyone enough time to verify their accounts. After this initial optional phase, we’ll be rolling out mandatory email verification later in the year.

Why email verification? There are several options when it comes to account security, and email verification is just the first step. It’s pretty standard practice at this point, and it’ll allow us to start unlocking other optional security features later this year, like Multi-Factor Authentication.

We'll be here to answer questions below! o/

94 Comments

leagueofturds1/30/2018, 6:28:15 PM14 votes

Why would you call “buying skins” an investment? It’s a consumption. Investments can be sold for a higher value. Investments have returns. Do skins, or any money you spend on this game have any return to them? No. It’s a consumption.

LostFr0st1/30/2018, 6:27:43 PM6 votes

This doesn't change what info we'd use to log-in right? As in it'll still be username+pass correct? (hoping this is a yes for security reasons).

Asking because some games have done that and needed to revert in the past (it leads to leaked e-mails in the case of streamers, etc.), best if League never accidentally tries it.

Ayame Isaki1/30/2018, 6:41:33 PM6 votes

When will league support two factor authentication?

Chermorg1/30/2018, 6:42:53 PM5 votes

I'm with Deep Terror Nami here. 2FA, while I personally do not believe it is overall more secure for the common end user (who's more likely to fuck it up than use it to secure their account), is much more important than adding email verification in-client in my opinion. Email verification is not even required for 2FA to be put into place - 2FA can happen without an email attached to an account at all.

I don't think email verification being on the website only is a problem. It has not been and will not be. Maybe the 4 game XP boost for verifying your email should come back - I feel that'd be easy and leave time to work on actual helpful things that people have been clamoring for such as 2FA (even though, again, I don't see why they want it).

Purejoyce1/30/2018, 9:11:24 PM3 votes

8+ years for one of the most popular games in the world without 2 step verfication still blows my mind. Better late than never, but holy carp, it's still "on the way later this year". :D

JarodDempsey1/30/2018, 8:55:44 PM2 votes

When will league get 2fa based on ip address? I dont mean having to submit a code every time we log in but every time we log in from a new location/device would be really nice for security concerns.

Mysticman891/30/2018, 7:26:58 PM2 votes

Will the in-client email verification allow people to use emails already associated with another account?

It's been ages since I've done this stuff, but I remember being annoyed with smurfs being unable to verify using my main email, so needing to use a throwaway email, and then changing my email to my main one after (which for some reason the system doesn't take issue with [...I don't think anyway, again it's been ages]).

ChuShoe1/30/2018, 8:59:45 PM1 votes

Is there anyway we could have an extra measure for security depending on if we log in from another IP/computer, similar to steam?