Implement 2FA

Mastermann

For added account security, I am suggesting you implement (A completely optional) 2FA. A previous suggestion asked for mobile numbers to be added, so it could also be done through text, though some people may be uncomfortable giving out their details, or live in bad-signal areas.

Here's an example:
The first time you sign in to your CF account on any given computer, you have to (If you have 2FA turned on) enter a randomly generated code from either an authenticator app on your phone (Easier if you can't alt-tab), or from your e-mails. Of course this would be completely optional.

Additionally, there would need to be an account recovery code (Alternatively you could use already existing account recovery methods) that would allow you to disable 2FA if you lost/broke your phone, or lost access to your e-mails.

Advantages:

• A scammer couldn't steal your account without the code

• Less tickets for the GMs

• Could potentially cut-down on account trading since it's more effort to disable the 2FA

Disadvantages:

• If you lost access to your authentication method you'd have to send a ticket/request to disable authentication on your account

• (Barely a disadvantage) You'd have to take an extra few seconds to log on for the first time

GeneralZezo2

+1 good idea
This will help many players

BlaCkeNeD7

master_mann wrote: »

If you lost access to your authentication method you'd have to send a ticket/request to disable authentication on your account

I don't think that would be a good idea, since the first thing any scammer would do would be exactly that. But if that wasn't implemented there would be no way to get your account back in case you got scammed.
Overall it's a +1 from me, judging by the ammount of people who lost their accounts.

Mastermann

BlaCkeNeD7 wrote: »

I don't think that would be a good idea, since the first thing any scammer would do would be exactly that. But if that wasn't implemented there would be no way to get your account back in case you got scammed.
Overall it's a +1 from me, judging by the ammount of people who lost their accounts.

In regards to disabling authentication, you'd have to prove it was you by answering security questions, providing information about payments made, current/old passwords etc., so it's no different to recovering your account if you lose access to the e-mail.

OneTrueMitch

That's a good idea! An optional but more secure way to log in would be super useful. Another addition would be to only have 1 mobile code per account, and that same number cannot be used on multiple accounts.

+1 from me