My account is being blocked every day

I think this post will also be fairly relevant to you. Please don't post in that thread however if you have questions. Continue posting questions in this thread and we can assist you as best as we can.

"

Crasher991 wrote:

Thanks, I already understand why it happens.
What I'm looking for is how to disable this feature.

You can email support as lagwin suggested, but it makes it very easy for your account to get hacked/stolen.

The whole reason they put this system in is because of the outbreak of hacked accounts at Open Beta... before they had this system in place. Accounts by the hundreds were being stolen and stripped due to various web-related and watering-hole exploits.

Personally, I'd rather log in to find the unlock code dialog and take the 10 seconds to unlock my account than log in to find my account stripped. It's not THAT much of an inconvenience if set up properly (use gmail). Literally, the code is in my inbox before I can alt-tab out of Path of Exile, and it's sorted so I can just pull up that folder, it's right on top, I can copy/paste the code and it's all set.

The security is there for your own protection as a lot of users don't have the safest of browsing habits.. in addition to there being exploits that even the best of us can be caught by. When zero-day vulnerabilities are released for Java or Flash, a targeted (watering hole) attack can cause compromise to almost anyone.. no matter how safe you are at browsing.

"

Crasher991 wrote:

Well, I still don't get it.
Every security system has its vulnerabilities, both in real life an on the internet, we already know that.
Now, what's different about this game that justify that extra measure?
If I was able to keep safe my WoW account for 10 years without it, why would I fail with this one?

It has nothing to do with you directly, and has everything to do with the demand, exploits, and hackers out there.

PoE accounts were (are) a large target. More-so than WoW accounts actually (at least they were). So the exploits are targeted specifically toward PoE. It's not that PoE is less secure.. but it was definitely the target of a large-scale watering hole attack.

I don't understand why people WOULDN'T want that extra layer of security. I added 2-factor authentication to my email because it was available, and is a GREAT measure of security to prevent access. I think people who DON'T put 2-factor on their email are asking for trouble one of these days.. especially with how many things are tied to email.

I've been in the industry a long time, and I've see what happens to people. If you're "joe user" you have your PoE account also on some forum somewhere. You also used the same email for PoE as you did your email that is attached to it. So Hacker gets your PoE information, uses that to get into your email, then uses your email to access a lot of other accounts (game accounts, bank accounts, social media accounts, etc).

That's a VERY common method of full compromise. That's why it is recommended to at MINIMUM segregate your passwords by "zones".. although it's better to not share ANY passwords between ANY systems... but at the very least, make sure the game password is different than your email password, and that both of those are different from banking password, etc.. not that much of this matters if they gain access to email.

The unlock code is a minor inconvenience for the major benefit it provides... it's your account however. I just don't want you to end up getting hacked, then being all upset that you could have easily protected it, and instead went out of your way to remove the protections.

Good luck.