Forums

Two-factor Authentication

Quick find code: 380-381-62-65435576

Mod Reach

Mod Reach

Jagex Moderator Forum Profile Posts by user
Original message details are unavailable.
Original message details are unavailable.
Original message details are unavailable.
Original message details are unavailable.
You can disable the authenticator via email? That kind of defeats the purpose of it.


Which is why they suggest you also use 2-step authentication on your email as well.
A lot of people seem to be reading the first page, then skipping to the end and jumping to conclusions instead of being intelligent enough to read the thread or FAQ for the answers to their questions. Smarten up folks.


It surprises me that, with email providers providing two-step authentication (bot via text and random number generation) that some people still chose to either not use the two-factor service, or not use an email provider that does.

Personally, protecting my emails is number 1 on the security priority list. Having my bank, insurances, gaming accounts and family linked to my email address, it makes sense to secure it to the highest grade. Having my email two-step verified immediately makes it almost impossible for my RS account to be hijacked with or without my account having appropriate security defences. Of course, having standard security awareness online also limits those chances.

But if your account gets recovered by a hijacker, their e-mail will be registered on the account.. Right?
I think lot's of people get hacked by recovery.


For an account to be recovered, there has to not be an email address on the account. If your account is recovered by email, it's because your email address wasn't secure.

This is my point; if you don't have a secure email address and your provider has a facility for it, USE IT!

Otherwise, move to a provider that does :)
-----
@JagexReach

23-Jun-2014 17:06:18 - Last edited on 23-Jun-2014 17:07:47 by Mod Reach

Hays21

Hays21

Posts: 117 Iron Posts by user Forum Profile RuneMetrics Profile
The authenticator will not work for me. I scanned the code and every time I enter in the code on my computer it says invalid code. Also says "Check your phone to make sure it is set up to the correct time." Do I need to change my phone to the time zone of the Jagex servers in order to authenticate my account?

23-Jun-2014 17:07:40

Mod Weath

Mod Weath

Jagex Moderator Forum Profile Posts by user
Original message details are unavailable.
The authenticator will not work for me. I scanned the code and every time I enter in the code on my computer it says invalid code. Also says "Check your phone to make sure it is set up to the correct time." Do I need to change my phone to the time zone of the Jagex servers in order to authenticate my account?


I think you need to make sure that the time on your phone and PC are exactly the same :)

23-Jun-2014 17:16:27

Bear Roar

Bear Roar

Posts: 211 Silver Posts by user Forum Profile RuneMetrics Profile
Original message details are unavailable.
Original message details are unavailable.
Original message details are unavailable.
Original message details are unavailable.
Original message details are unavailable.
You can disable the authenticator via email? That kind of defeats the purpose of it.


Which is why they suggest you also use 2-step authentication on your email as well.
A lot of people seem to be reading the first page, then skipping to the end and jumping to conclusions instead of being intelligent enough to read the thread or FAQ for the answers to their questions. Smarten up folks.


It surprises me that, with email providers providing two-step authentication (bot via text and random number generation) that some people still chose to either not use the two-factor service, or not use an email provider that does.

Personally, protecting my emails is number 1 on the security priority list. Having my bank, insurances, gaming accounts and family linked to my email address, it makes sense to secure it to the highest grade. Having my email two-step verified immediately makes it almost impossible for my RS account to be hijacked with or without my account having appropriate security defences. Of course, having standard security awareness online also limits those chances.

But if your account gets recovered by a hijacker, their e-mail will be registered on the account.. Right?
I think lot's of people get hacked by recovery.


For an account to be recovered, there has to not be an email address on the account. If your account is recovered by email, it's because your email address wasn't secure.

This is my point; if you don't have a secure email address and your provider has a facility for it, USE IT!

Otherwise, move to a provider that does :)


It just goes to show that the people getting "hacked" are the ones who refuse to take the appropriate precautions. I genuinely have no sympathy for these folks.

23-Jun-2014 17:16:36

Mod Weath

Mod Weath

Jagex Moderator Forum Profile Posts by user
You can do it without a phone too, this is from the FAQ:

"If you don’t have a smart phone, there are options available to you, so you’ll be able to get the code directly from your pc. Simply do an internet search for a suitable authentication software that you can download (such as WinAuth for windows PC’s)."

23-Jun-2014 17:37:25

Saxo
Mar Member 2020

Saxo

Posts: 7,687 Rune Posts by user Forum Profile RuneMetrics Profile
Original message details are unavailable.
Can you log in to 07 with authentication beeing disabled? or u must enable it to log in
can login disabled

Is there any reason why there's a 30 day expiry on it? Should be able to set it for however long you want, per device imo. Forcing people who can keep their accounts and such secure to reverify their account every month is pretty dumb.

23-Jun-2014 17:55:17

Quick find code: 380-381-62-65435576 Back to Top