EVE Information Portal

With the release of the Ascension expansion, we introduced some new account security features in order to further safeguard your EVE Online accounts.

Check out this Dev Blog for further information and clarification on the systems that were introduced on Tuesday, November 15th.

I really hate CCp for doing this to my accounts.
I have been playing for 8 years and now I have to verify ownership because of this? I have no access to my original email accounts and that means I have 4 accounts I can't even access. So I have to put in tickets for all 4 accounts and then verify each one.
You guys made my life miserable and I will never forgive you for that.
This is so friggin dumb.

So if someone decides to use this Google App thing so they continue to use 2FA, has Google and CCP solved the exploit that left the Blizzard 2FA codes open and prepped for hacking? Which left an absolute mess of stolen WoW accounts along with needing to re-verify so many accounts in mass numbers?

If so, I salute the app coding crunchers of CCP. You've done the impossible.

Until then, Nah. I'd rather not put anything on my phone so easily snooped into that's connected to my Eve accounts.

>Jeven

so everyone is moaning over 4 or five five digit code to copy and past out of an email come on its once then all your accounts are ok yes it takes time to receive mail but it gets done and all that time if they're active there training so why the morning moans

Dear CCP, can you please make your terminology a little more distinct:

• use "Two Factor Authentication" only for "Google Authenticator" style authentication (this actually allows any implementation of RFC 6238 TOTP to be used, I've been happily using 1Password)
• use "Email Token" for email-based verification

Hit the “Don’t ask for codes again on this computer” checkbox, and it wont' bother you for codes while you're travelling.

Partially correct, initially the emails we were sending out that weren't related to the authenticator mentioned it initially too, but this was rectified pretty quickly when we realized the mistake.

The launcher and our secure website is a little more complex to update and takes longer

This is a flat face flop.
Changes such as these MUST be announced well ahead of the time.
And definitely NOT stealthily implemented right at the start of a major expansion.

Most of Eve-Players having login-problems due not reading help-articles like the english-client-setting thing.

But there where some of us, which could not loging in and to you ISD Max Trix not could verifiy email-adresses, because CCP does setup new E-Mail-Adress-limitations which until yesterday where not communicated.

We discussed this here: https://forums.eveonline.com/default.aspx?g=posts&m=6718516#post6718516

Iam absolutly frustrated that ISD Max Trix first pointing at our vauld to not use verification since it was announced one month ago.

Dear Max Trix, i did the verification before patch-day with no e-mail answer. So i thought i easily do it again after patch-day. No one said its not possible. That the verification and further no login to ANY Eve-Service, does not works with some emails was not said.

Iam waiting for reimbursement of the lost days (like it was guaranteed) and ISD Max Trix, please inform your self about what was going on in your IT-section. Because iam a friendly person, im not post any abusive words thats going on in my mind about you

Yeah, this situation really is totally unacceptable for all involved: your paying customers are being left to blow in the wind for a week. Your customer service staff have got to be ready to eat their guns after a week straight of overtime doing what's presumably a long and complicated override process over and over again. How many people's weekends are you going to ruin before you go back to the people who could actually fix the software?

I've been locked out of half my accounts (naturally, the half with all my science + industry activity) for almost a week now. Like half the people in this situation, I'm here entirely due to your screw-ups-- I have access to the email account in question and there's no reason this process should need to be done manually.

Why, oh why don't you just correct the software issue so that emails actually get sent, or at least allow people to log into account management to click a re-send link using their usernames and passwords? If this had happened to a small number of users and could've been remedied by hand in a day or two, that would be one thing. But it's been a solid week now and the only thing I've seen from you guys is a c/p form email and some smug ISD rep locking all the threads about the issue.

Please consider a fix rather than a workaround that's going to take weeks. Adding game time to affected accounts after the fact is not a good way to "compensate" people who are missing out on the entire gold-rush period following a major expansion solely because your security team neglected to use a flow chart when designing the auth system.