Email confirmation [Suggestion] |

Nonou
God

A rather annoying player

Posts: 1,051

Email confirmation [Suggestion] Jul 22, 2015 9:19:50 GMT 1

Quote

Post by Nonou on Jul 22, 2015 9:19:50 GMT 1

Jatsu said in his profile in Friends Server:

Jatsu
Hello, this is a reminder to everyone: Please do not share your passwords with anyone! 10 HOURS AGO

Many players actually share their passwords. They give their passwords to other player to make them an avatar, or because they're really good friends, so they trust each other.
But there are many times that people lose their passwords because they're changed by other guys that logged in their profile.

Also, Jatsu commented:

So I say, why is it the only security on your account? Even though if you've confirmed you email, you would have no chance to get your account back, if the scammer changed it too.

So, my suggestion
Once you have confirmed your email in order to change it afterwards, you have to do it from your previously confirmed email. So here are the steps about how you would do it (if this was added)

1. Go to "Update Profile" page and change your email.
2. Once you did that, a message will appear saying: An email has been sent to you. Check it and click on the link to change your current email
3. Once you clicked that in the email that was sent to you, you will be directed in a page in which you will be able to change your current email.
4. Once you've completed the blank spaces about your new email, you must type in a password that was sent to you in the email

What would be achieved with that?
In case someone that knew your password, changed it you will be able to change it with your confirmed email. This way, the scammer won't be able to change your in-game email so he could get your account forever

While I agree that we shouldn't share our passwords, I believe that people will continue losing their accounts by scammers.

What do you think about my suggestion? Would it be helpful?

Last Edit: Jul 22, 2015 9:20:56 GMT 1 by Nonou

YL
God

YL from the WWW server

Posts: 1,158

Email confirmation [Suggestion] Jul 22, 2015 9:47:03 GMT 1

Quote

Post by YL on Jul 22, 2015 9:47:03 GMT 1

This is good but not the best, what happens if you forget your email password? In my opinion this would be better:

Users should be able to change their email by entering their account password and new email. However, an email should be sent to the original email address asking if it was you who did this change, the email should contain a link that is activated for a week that you can click where it sets confirmed email address back to the original email address and signs out all sessions logged in to the account.

Current problems with account hacking:

1. No email is sent to the original email when the email is changed, by sending an email that would set the email back to original and signing out all sessions would solve pretty much every single hacking case

2. There is no way for the account owner to sign out the hacker. I am surprised this feature hasn't been added yet even after people being account stolen every day, they can't do anything if someone has logged in and the person can continue to destroy the account forever

Nonou
God

A rather annoying player

Posts: 1,051

Email confirmation [Suggestion] Jul 22, 2015 10:25:20 GMT 1

Quote

Post by Nonou on Jul 22, 2015 10:25:20 GMT 1

Jul 22, 2015 9:47:03 GMT 1 YL said:

This is good but not the best, what happens if you forget your email password? In my opinion this would be better:

Users should be able to change their email by entering their account password and new email. However, an email should be sent to the original email address asking if it was you who did this change, the email should contain a link that is activated for a week that you can click where it sets confirmed email address back to the original email address and signs out all sessions logged in to the account.

Current problems with account hacking:

1. No email is sent to the original email when the email is changed, by sending an email that would set the email back to original and signing out all sessions would solve pretty much every single hacking case

2. There is no way for the account owner to sign out the hacker. I am surprised this feature hasn't been added yet even after people being account stolen every day, they can't do anything if someone has logged in and the person can continue to destroy the account forever

If you lose your email password, you can input your phone number (with which you had signed up) and then get your email back. Well, if you're irresponsible and lose your email password, then it's not KoGaMa's fault.

By the way, for the idea you submitted, you still need your email password

ᅚᅚ ᅚᅚᅚᅚᅚᅚ ᅚᅚᅚᅚᅚᅚ Legend ᅚᅚᅚᅚᅚᅚ ᅚᅚᅚᅚᅚᅚ ᅚᅚᅚᅚᅚᅚ Posts: 2,398	Email confirmation [Suggestion] Jul 22, 2015 14:46:45 GMT 1 Quote Select Post Deselect Post Link to Post Member Give Gift Back to Top Post by ᅚᅚ ᅚᅚᅚᅚᅚᅚ ᅚᅚᅚᅚᅚᅚ on Jul 22, 2015 14:46:45 GMT 1 and yet people will STILL get themselves hacked, and even forgot this...

Linkky Senior Moderator "Keep creating amazing things, never doubt your limits." ~Linkky 2020 Posts: 1,323	Email confirmation [Suggestion] Jul 22, 2015 16:00:22 GMT 1 -_Mavis_- likes this Quote Select Post Deselect Post Link to Post Member Give Gift Back to Top Post by Linkky on Jul 22, 2015 16:00:22 GMT 1 We should get a badge called, "Email-Confirmed" for confirming our emails within' the first week of this option. :3
	Hey guys! It's... Linkky!! My profiles: International - www.kogama.com/profile/45925/ Friends - friends.kogama.com/profile/7682/ BR - kogama.com.br/profile/6271800/

Jatsu
Titan

Posts: 842

Email confirmation [Suggestion] Jul 22, 2015 19:04:14 GMT 1

Quote

Post by Jatsu on Jul 22, 2015 19:04:14 GMT 1

Jul 22, 2015 9:19:50 GMT 1 Nonou said:

So I say, why is it the only security on your account?

I wrote that because it is no longer required to register an account with an e-mail. I've discussed this before, but since e-mails are now optional, your account's security is essentially as weak as your password is. This was clearly done in favor of young users who don't have an e-mail, in order to make it easier to register (*cough* pad registration numbers *cough*). The result: I've already spoken to at least three players who have account problems and can't log on, and can't even recommend to use the "Lost Password?" retrieval option because they didn't associate an e-mail with their account.

Seriously, if you've already shared your password, then the person with your password can already seize your account and remove your ability to retrieve it by deleting the e-mail, if it was even added, associated with it. Passwords require verification in order to be changed, that same redundancy should be applied to e-mails. In that regard, I would prefer Nonou's suggestion.

Last Edit: Jul 25, 2015 3:29:59 GMT 1 by Jatsu

-_Mavis_- Ninja Somebody's Milk and Cookies Posts: 284	Email confirmation [Suggestion] Jul 25, 2015 4:26:30 GMT 1 Quote Select Post Deselect Post Link to Post Member Give Gift Back to Top Post by -_Mavis_- on Jul 25, 2015 4:26:30 GMT 1 email confirmation is very needed. Why? because without it, people can create a lot of account just to do some stupid things! like maybe bully others or like his/ her projects and many more

Email confirmation [Suggestion]

Post by Nonou on Jul 22, 2015 9:19:50 GMT 1

Post by YL on Jul 22, 2015 9:47:03 GMT 1

Post by Nonou on Jul 22, 2015 10:25:20 GMT 1

Post by ᅚᅚ ᅚᅚᅚᅚᅚᅚ ᅚᅚᅚᅚᅚᅚ on Jul 22, 2015 14:46:45 GMT 1

Post by Linkky on Jul 22, 2015 16:00:22 GMT 1

Post by Jatsu on Jul 22, 2015 19:04:14 GMT 1

Post by -_Mavis_- on Jul 25, 2015 4:26:30 GMT 1