The Blizzard Authenticator

Crass · 06/26/08, 3:07 PM

Apparently Blizzard is releasing a SecurID-like device to add a level of security to WOW authentication. Details can be found here: http://us.blizzard.com/support/artic...660&rhtml=true

This should add an interesting twist on not only account security and account sharing, but ebayed accounts as well. I'll probably get one for the price they are selling it for ($6.50 US) simply because it's worth that much to me to not have to wait two weeks to get my gear back.

If you're not sure how SecurID's work, here's more information on that: Hardware Authenticators

**EDIT**
wowinsider.com is now reporting that The Blizzard Authenticator is one of the things being announced at WWI. Source: Blizzard Authenticator to be introduced at the Worldwide Invitational - WOW Insider

Kytrarewn · 06/26/08, 3:10 PM

Would someone be willing to [ quote] the article in question for those of us at work?

levk · 06/26/08, 3:12 PM

Here:

What is the Blizzard Authenticator?

The Blizzard Authenticator is an optional tool that offers World of Warcraft players an additional layer of security to help prevent unauthorized account access. The Authenticator itself is a physical “token” device that fits easily on a keyring.

Where do I get a Blizzard Authenticator?

The Blizzard Authenticator can be purchased directly from the Blizzard Store for $6.50.

How does the Blizzard Authenticator work?

You must first associate the Blizzard Authenticator to the World of Warcraft account you play. Once the account has been linked, the Authenticator token will be required to log in to Account Management or to the game; when logging in, you will be prompted to supply a digital code generated by the Authenticator.

How do I associate a Blizzard Authenticator with an account?

You can associate your Blizzard Authenticator to the World of Warcraft account you play by logging into Account Management. Click the “Add Blizzard Authenticator” button and then enter the serial number on the back of your Blizzard Authenticator.

What is a digital code and where do I see it?

The digital code is a six-digit numeric code that is produced when you press the button on the front of your Blizzard Authenticator. Each code is unique and is valid only once.

Where do I enter the digital code when I log in to World of Warcraft or to Account Management?

After you enter the account name and password, you’ll be prompted to provide the digital code from your Blizzard Authenticator. You must press the button on your Authenticator and enter the code it displays to complete your login.

Can I apply my Blizzard Authenticator to more than one account?

Yes! You’re welcome to associate a single Blizzard Authenticator to as many accounts as you like. Please remember that you must have that Authenticator with you to log in to any of these accounts afterwards.

What happens if I lose my Blizzard Authenticator? Do I lose the account it’s linked to?

If you lose your Blizzard Authenticator, you will need to contact Blizzard’s billing and account services team for assistance. Our representatives will be able to assist you with regaining account access by verifying certain secure information with you.

Will my Blizzard Authenticator work while I am traveling? Will it work in other countries?

Yes, the Blizzard Authenticator will work anywhere you can log in to World of Warcraft.

Will this have any effect on Parental Controls?

No, the Parental Control service will not change in any way. However, the parent/guardian will need the Blizzard Authenticator to log in to Account Management and make changes or updates.

Can I turn the extra security of the Blizzard Authenticator on and off as I wish?

While you can add the Blizzard Authenticator as you wish, removing it will require a call to billing and account services.

Does the Blizzard Authenticator replace my password and secret question?

No, the Blizzard Authenticator is only there as an optional measure to augment account security. It does not replace standard security measures. You will still be asked to enter the account name and password when logging into the game or Account Management, and should not share that or your secret question information with others.

Will a Blizzard representative ever ask for my Blizzard Authenticator information?

Yes. Blizzard may ask for the serial number on your Blizzard Authenticator, typically to help you associate it to an account or to verify your ownership of that Authenticator.

What if my Blizzard Authenticator stops working or has a technical problem?

Blizzard will have several support options available to assist you and ensure that the impact on your play experience is minimized in the event of a problem with your Authenticator. Please contact our billing and account services team for assistance if you have questions.

Pixen · 06/26/08, 3:18 PM

I like it. Keyloggers be damned.

Have fun sharing accounts though, oi.

Floria · 06/26/08, 3:33 PM

Sounds like a way to assure security for those afraid of keyloggers etc. I doubt it'll stop account selling, since you can send the Authenticator tag to the buyer. In fact, this makes it more secure for the buyer as well, as the original owner won't be able to take the account back as easily.

Do a lot of folks share their accounts with friends? This seems to be the biggest obstacle to getting folks to try it.

Crass · 06/26/08, 3:37 PM

Originally Posted by Floria

Sounds like a way to assure security for those afraid of keyloggers etc. I doubt it'll stop account selling, since you can send the Authenticator tag to the buyer. In fact, this makes it more secure for the buyer as well, as the original owner won't be able to take the account back as easily.

Do a lot of folks share their accounts with friends? This seems to be the biggest obstacle to getting folks to try it.

I personally don't share my account except for my wife. I don't want anybody accessing my account when I'm not aware of it. I get paranoid when I log in and I'm not standing in the place I left myself.

If anything, with this I'll feel safer sharing my account with friends because I'll know they have to call me when they want access.

Denogran · 06/26/08, 3:39 PM

I won't get one just because I'd be afraid I'd lose the damn thing and then have to deal with Blizzard to try and get a new one. Sounds like a lot of effort that's mostly prevented just by using safe surf habits.

Thamb · 06/26/08, 3:42 PM

Originally Posted by Floria

Do a lot of folks share their accounts with friends? This seems to be the biggest obstacle to getting folks to try it.

I don't share my account information but I know of multiple people that share accounts with friends or others in case they are gone for a raid or event and the rest need a tank, healer or whatnot. I always get a good laugh when the primary user logs back and on and says something like, "Hey! Where'd my spellcloth go?" or "Why am I dead in Stormwind?"

Nite_Moogle · 06/26/08, 3:42 PM

That's a fantastic idea for regions of the world that heavily rely on shared computers.

◊ zirky · 06/26/08, 3:43 PM

$6.50 for a fob or NoScript for free...

Ralnar · 06/26/08, 3:45 PM

edit: already said

Xelopheris · 06/26/08, 3:59 PM

This does nothing to help people who buy accounts. The FAQ states that it can be removed with a call to Billing dpt. If the person would have had enough information to take back the account without the key, they will probably have enough information to disable the key.

This reduces the ability to account share and the ability to get keylogged, plain and simple.

I am curious as to what web portions will require the token to log into. Account management? Forums? Armory?

And as great as NoScript is, it still doesn't prevent some stuff.

koaschten · 06/26/08, 4:16 PM

For those that might not know what those tokens look like, this is my similar PayPal token
//edited to insert picture of original product.

Douglas · 06/26/08, 4:17 PM

Originally Posted by Nite_Moogle

That's a fantastic idea for regions of the world that heavily rely on shared computers.

Heck, this means I'm much more likely to rent out some time at a local gaming shop for a guild event.

In my neighborhood we've got this place that has XBoxes, PS3s, Wiis, and a ton of PCs, and a ton of games for them. You can go in and pay like $5 an hour or something to try out a console and play some games on it, or you can rent the whole place out for parties. They have WoW on all their machines and advertise that fact, but I've considered it basically insane to consider using them as you have no idea who else has been doing what on those machines. But these gadgets make that completely safe, so suddenly hosting a WoW party there will no longer be irresponsible.

Yay!

Suesse · 06/26/08, 4:24 PM

Great idea and super low price! I play WoW with people at work in our game room. The entire company has access to those game room machines. I'll feel a lot safer knowing my account and my guild's bank is safe.

◊ Cathela · 06/26/08, 4:33 PM

Originally Posted by zirky

$6.50 for a fob or NoScript for free...

To me, $6.50 is a small price to pay for the extra peace of mind of not having to worry about some other vulnerability compromising your account. Even more so if, like me, you're a GM so your guild's entire bank could potentially be looted through your account.

farlin · 06/26/08, 4:38 PM

Any word on if you can have 2 keys per account? Or somehow get 2 copys of 1 key? I am terrible with losing stuff so keeping 1 around my house and 1 on my keychain would be nice. Losing the key would be just as bad as getting hacked in terms of the time it would take to get back to playing

koaschten · 06/26/08, 4:52 PM

The FAQ states that you can disable the Token via Support & Billing after proving your Identity. e.g. copy of your ID etc...

Dollar · 06/26/08, 4:53 PM

I really think that most keylogging issues are circumvented by having a good password and not clicking on any of the links in suspicious WoW forum posts. Seems like a ploy to make 7 dollars off every paranoid person that plays WoW.

erragal · 06/26/08, 5:05 PM

I would expect a couple of those dollars are going towards shipping. A portion actually goes towards purchasing the physical device. There is also the cost of training support staff with this new program.

Doesn't seem like a huge cost for a one time fee, if you're concerned about security. I'm not seeing a huge potential profit here, just a mostly break even service overall. I do agree that to actually NEED it is a sign of poor personal security practices, but I just can't see it as this huge money grab.

Correction: They may see an increase in profit due to less support time/money being devoted to restoring accounts that have been keylogged.

PsiVen · 06/26/08, 5:06 PM

Originally Posted by Dollar

I really think that most keylogging issues are circumvented by having a good password and not clicking on any of the links in suspicious WoW forum posts. Seems like a ploy to make 7 dollars off every paranoid person that plays WoW.

These fobs are growing in popularity in all sorts of applications. It was only a matter of time before WoW, infested with keyloggers as it is, caught on. I don't see any malice in this.

I noticed when I logged in recently that it said it was uploading nonpersonal computer specs or somesuch. Has this been happening for a while and I forgot about it, or is it something else new for account sharing folks to worry about?

erragal · 06/26/08, 5:09 PM

Many professional applications require USB dongles to use them as well, in order to check the rampant piracy. If these fobs become cheap enough, I could see them being packaged with games for the same reason.

• frmorrison · 06/26/08, 5:11 PM

Originally Posted by Dollar

I really think that most keylogging issues are circumvented by having a good password and not clicking on any of the links in suspicious WoW forum posts. Seems like a ploy to make 7 dollars off every paranoid person that plays WoW.

Hey, their customers will not get keylogged if they use this, 6.50 is worth it for some people. It may cost more if there is a shipping cost, but still a nice move on Blizzard's part.

farlin · 06/26/08, 5:13 PM

Originally Posted by PsiVen

These fobs are growing in popularity in all sorts of applications. It was only a matter of time before WoW, infested with keyloggers as it is, caught on. I don't see any malice in this.

I noticed when I logged in recently that it said it was uploading nonpersonal computer specs or somesuch. Has this been happening for a while and I forgot about it, or is it something else new for account sharing folks to worry about?

The nonpersonal computer thing has been around since pre-tbc, might have even been pre-naxx. I remember the concern about what that meant when it first came out but I can't remember exactly what they were sending and what they needed it for

beefkitten · 06/26/08, 5:25 PM

Originally Posted by farlin

The nonpersonal computer thing has been around since pre-tbc, might have even been pre-naxx. I remember the concern about what that meant when it first came out but I can't remember exactly what they were sending and what they needed it for

It just sucks up demographic assumptions about you; Valve does this with Steam too (albeit you can opt-in or out, depending). This process will also poke for various external mods you might be using (or unaware of having).

The Warden (software - Wikipedia, the free encyclopedia) for your reading enjoyment.