MFA - Where to Enable?

What is the easiest way to enable MFA on an account? I had an attempt to get into my account and have some extremely rare items to protect.

default is on for standalone client and ask passcode (that send to email) when you changed ip

I really hope GGG just change to Google Authenticator style btw

"

neohongkong wrote:

default is on for standalone client and ask passcode (that send to email) when you changed ip

I really hope GGG just change to Google Authenticator style btw

Issue I had was, someone attempted to change my email address. Support messaged me about it, so I am worried that means someone had my password. (Which I have now changed). I’m hoping this would boot any other person on my account off, I don’t want my items stolen 😭😭. Been holding them for like 10 years almost.

Best account security is:

EMAIL:
2FA
Unique password
Make it an email that does not use any similar alias for example: don't use an email like: [Removed by Support]
Do not use the email for anything other than Path of Exile.


PoE account:

Change your GGG account password to a unique password that is not used for anything else.
Remove any "connections" like Steam or Epic games that could be unsecured / breached over time.

"

Will_GGG wrote:

Hey there,

We currently have a security system in place that will lock a Path of Exile account and send through an unlock code to the email address associated to it, if a login is detected from a different location to the one you usually play from.

If a Path of Exile account is accessed through Steam, any changes will go through your Steam Guard for confirmation.

You should be able to keep the account secured by having a complex, unique password and a well protected computer. If you have any questions or concerns, please contact us at support@grindinggear.com :)

Will_GGG the thing is, as Manocean pointed out, that in some cases people seem to try to make you guys change the original owners E-Mail to another one they have access to.
They message you from this other E-Mail claiming they have lost access to their original E-Mail, which they never had access to or owned.
Sadly in some cases this method of deceiving GGG-Support and robbing players of their hard-earned Items seems to have worked, according to recent reddit posts and trade listings.
Its indeed cynical that they try to abuse your well-meant efforts to help out players who might truly have lost access to their email this way, but i am afraid the process of confirming ownership over an account if an Email change is requested from an account-unrelated Email needs to be reviewed and/or improved.


Kind regards

It's 2023, please implement 2FA :)

"

Manocean wrote:

What is the easiest way to enable MFA on an account? I had an attempt to get into my account and have some extremely rare items to protect.

As pointed out already there is a fairly strict IP lock which results in your account getting locked until you enter the emailed code.

If you want more security you could look to your email account, i know google offer a similar feature (i believe you can get the code sent to your phone).

That means that any would be hacker trying to steal your account would have to have access you your game account details, your email details but also your phone messages....which is unlikely

I am now working on getting my current account behind steamguard, I’ve always had it on the PoE client only before.

Support was able to lock my account and work with me to verify (through various means) that I am the Manocean.

It is unlocked now and i just finished linking to steam. Hooray, now all my items are more safe.

"

midtown#0730 wrote:

It's 2023, please implement 2FA :)

aaaand its end of 2024... still not 2FA...