Jump to content
EN
Play

Forum

Security question before entering your account


Recommended Posts

When your account is hacked, hackers can enter and spend crystals on MU-s, paints and other.

 

My idea is:

 

When you type your nickname and password, an pop-up window will appear with the question you setup via e-mail adress:

 

Example:

 

"BEFORE ENTERING YOUR ACCOUNT, ANSWER THE QUESTION"

 

Question: Your favorite food?

Answer: ________________

 

 

Write your opinion below!

Share this post


Link to post
Share on other sites

Asking question is good when you forget the password. It will also be a good idea to ask the question once in while so we don't forget the answer :p

But it won't be necessary to ask the question on every log in.

Share this post


Link to post
Share on other sites

I'd love to have this added layer of security.  Perhaps a similar process to steam, where it records your ip as safe but every new ip that your account logs into requires verification.  I wouldn't be opposed to e-mail verification in lieu of a security question.  Then once that IP is verified you can log in normally from that connection.  Would give us security and peace of mind.  At any rate there should be a setting to disable this verification if a person would rather save effort and take the risk.

 

As to whether or not this would be worth the effort for the devs is another question.  It'd require databases full of ips and passwords and some cumbersome changes to login.  Meanwhile the vast majority of hacked accounts seem to be socially engineered.  Either someone got tricked into giving away a password or they were gullible enough to try a hack client and the maker of it stole their account.  In that case they'd simply steal the verification info too (except for phone verification where they could not gain access).

Share this post


Link to post
Share on other sites

Why not? I don't think it's that probable to forget your answer, because it doesn't have to be your favorite food. It can be "What's my address" or "What hour of the day was I born on?" It can be anything.

Share this post


Link to post
Share on other sites

Well, this is a good idea, but it should be optional. Every website I know of that has security questions always asks first whether or not you want them. :)

Share this post


Link to post
Share on other sites

Exactly! A nice idea but i already know that and i was about to post it! Cool!

Belongs to Minecraft «««

~Curt

 

 

 

 

Exactly! A nice idea but i already know that and i was about to post it! Cool!

Tri-Exclamation-Point [Team]

Share this post


Link to post
Share on other sites

Are accounts generally stolen by brute force though?  A captcha may not add anything.  Even then there is a simpler solution.  After five failed login attempts within 48 hours lock the account and send an email to the account's registered email to unlock.  Would be as secure and much less annoying.  It would also alert users when someone tries to log in to their account.

Share this post


Link to post
Share on other sites

Ummmm, not bad. :)

 

However, I always get bored on filling the username and passwords, and now this! It would be too much!

 

But, since I am for security, +1 to this idea. :)

Share this post


Link to post
Share on other sites

Basically a second password is all it is. 

 

Nickname 

 

Password

 

Question

 

So basically people could still exchange and transfer accounts. Also if you know their pass and then you need to answer, say, favorite dessert you could just type in all of the desserts you know of 1 by 1.

Share this post


Link to post
Share on other sites

Actually, there should be an option to set your account to a default location (i.p address), when a user logs in from a different location, the security question should show up

Share this post


Link to post
Share on other sites

your idea is good, but there should be an option whether we want the security question to be asked or not. 

We are out of Options. :P

Share this post


Link to post
Share on other sites

My idea is like, yknow how you can link your email to your account but you can do something to have it not be able to change pass unless you get in there email. I want it to be like, if u enter garage and buy something, it will a ask secuirity question before buying it. :)

 

Share this post


Link to post
Share on other sites

Archived

This topic is now archived and is closed to further replies.

×
×
  • Create New...