Forums

blog:Account Security Features

Quick find code: 294-295-396-66126612

Theos
Aug
fmod Member
2008

Theos

Forum Moderator Posts: 23,574 Opal Posts by user Forum Profile RuneMetrics Profile
These are some well thought out, and highly welcome changes. I think the backup code will help protect many players from being hijacked.

Now if only it, and authenticator could be mandatory...wishful thinking, and not ideal but it would be one of the most combative measures against phishers. The option of it, is a great start.


Will Jagex be incentivizing backup codes? There was the Security Stronghold back in the day. It is dated, obviously, but has Jagex thought of giving out Treasure Hunter keys or Runecoins to players who opt into using backup codes? This could encourage a large portion of the player base to opt in...

Even offering 10 Treasure Hunter keys, for example, to players who add the backup code within the first week code influence some people into doing it...

:)
Forum Moderator

25-Oct-2019 00:25:55 - Last edited on 25-Oct-2019 00:26:48 by Theos

Cindylu
Aug Member 2010

Cindylu

Posts: 11 Bronze Posts by user Forum Profile RuneMetrics Profile
I like and appreciate all of the additions to account security. Did you ever think to add the mailing address as a fallback to any bogus claims to the real ownership to an account? It might even alleviate the huge number of bots the plague this wonderful game. Maybe no more than 10 accounts to an address. I have a whooping 2 accounts and that's more than enough for me. Just like an account is linked to a credit card, don't those cards have addresses? Too complicated for me, but this is always a worry that someone will take my account away after I have spent all of this time getting this far on my own.

25-Oct-2019 03:09:11

KrugrsReveng
Mar Member 2009

KrugrsReveng

Posts: 973 Gold Posts by user Forum Profile RuneMetrics Profile
I am happy to see some of these changes. Though I wish they were implemented a week or 2 sooner. About a week ago I fell for a Fake ad on Facebook for mobile. Which ended up with me losing quite a bit of 10 years of work. For Security purposes I would highly suggest being wary of any ad that is not on this site.

25-Oct-2019 14:42:44

hey a1an

hey a1an

Posts: 67 Iron Posts by user Forum Profile RuneMetrics Profile
can you allow authentication to work on one or more device, were you can add more device.
i got an iPad that is use authenticator , it quite big so i only use it at home. but i also to work in nsync my my iPhone , which i carry when i'm out and about. but for me it for that convenience sake cause it kinda smaller, probably weird just reading this. but i also so feel self conscious about, what if i lost my phone, there loads of news that i read that involves people using there phone in public and, guys riding there mopeds or bike snatching your phone right out your hands , i know i got another device somewhere that can access rs with.
i want authentication on rs to work on, one more or more devices.

at the moment, i have to deactivate authentication on one device, so it will work on another device. i want it to take advantage of the two scan options. the ipad i have is saved on other, i want the other be be saved on school or work or just leisure or something.



like similar to what amazon has to offer it allows you to enroll/add more apps. then show what devices has rs authentication and on the page you select to remove the device/authentication code.


new user interface. easy to use, efficient. ^_^


.

26-Oct-2019 02:12:11 - Last edited on 28-Oct-2019 18:35:50 by hey a1an

Da Dope Pope
Jul Member 2011

Da Dope Pope

Posts: 1,377 Mithril Posts by user Forum Profile RuneMetrics Profile
Iron Felice said :
Tagakhlo said :
Roddy Piper said :
I'm not going to fall into the trap of fearmongering, that is for sure.

It is not a trap of fearmongering when the problem is a real one. People do have their accounts hijacked, and it's been happening even to people who weren't careless, and far too often.
Don't worry, he has alternatives for when his Runescape account is hijacked.



LoL that's 1 of the funniest posts ive seen in the rsof.

26-Oct-2019 08:11:40

Tagakhlo
Sep Member 2014

Tagakhlo

Posts: 1,119 Mithril Posts by user Forum Profile RuneMetrics Profile
Quantum Evil said :
There is a logic problem to how Jagex is trying to increase security. Jagex is trying to rely on email and standard authentication via Smartphone, These methods naturally require the user to be, by definition, secure all around. Jagex is relying on people to keep their Email accounts secure but that makes no sense since those same people where not secure in their game accounts.


The problem I have is that putting two-factor authentication on an E-mail account creates the risk of permanently losing the E-mail account if you lose your smartphone. To many people, that risk is simply unacceptable.

If a simple password on an E-mail account isn't secure enough, something like the old Account Guardian, security questions for password changes, while only providing a very modest amount of additional security, may be all that will work for some, and may be enough to make a difference.

27-Oct-2019 20:10:22

Incomitatus
Feb Member 2017

Incomitatus

Posts: 984 Gold Posts by user Forum Profile RuneMetrics Profile
I love the idea the direction you're going of focusing on helping players make their accounts more secure and updating the website and game to a more modern and secure system. It's about time, and has been needed for years quite frankly. However, lets be honest...this is only part of a solution to a problem you need to address.

Until you actually create a system that addresses the players needs and doesn't force us to contact you in the most awkward of manners, like going to Twitter for support for instance, this is only ever going to continue to be a substandard solution to what could be Jagex coming out and actually caring about their players.

Don't just update your security for the game and site for the players, make it easier and streamline the way we can get help for these situations. Waiting is not the issue, it's getting to the right people, right page, right sources whether your a new player, a long time player, or an old player who is coming back to the game - You should be able to find the information and help needed easily, not go through 10-20 pages, all tabbing you back in a loop to each other, or trying to send you to the forums or Twitter. Every other game, has a system to send you to Support to get support, whether it is for technical, for account issues, or payment issues...I think it's about time Jagex catches up with this and if you're going to be updating this, I suggest you also work on the support aspect too. Hopefuly then people will stop depending on others, many not so altruistic in nature, and be able to depend on Jagex themselves, or at the very least people Jagex has in-trusted with the duties to help it's players as support specialists, and less people will fall prey to these scams and predatory practices we see.

28-Oct-2019 23:20:26 - Last edited on 28-Oct-2019 23:22:56 by Incomitatus

Quick find code: 294-295-396-66126612 Back to Top