The Epic Games Store will soon require Two-Factor Authentication for free games

[WYP]

Security is important, and Epic wants your accounts to be safe.



Read more about the Epic Games Store soon requiring two-factor authentication to redeem free games.

 

[looz]

2FA is the dog's bollocks, it's not too bothersome but provides a great security impact. Especially since many, unfortunately, aren't willing to use a password manager and end up reusing passwords.

 

[Warchild]

2FA is the dog's bollocks, it's not too bothersome but provides a great security impact. Especially since many, unfortunately, aren't willing to use a password manager and end up reusing passwords.

What do you mean by unfortunately?

Regardless of 2FA or not. If there is a security breach. Epic will still tell you to change your password. And if you are willing to use 2FA, then it means you are more conscious about security, so will follow protocol and change it. Your details are more secure yes. It doesn't change the fact that one of your security firewalls has been compromised.

The drawback at times is you need your mobile device nearby. I work with them all day every day. To have to keep it at hand for this too is bothersome for me. Not to mention the reliance on the A2P service being operational and not suddenly blocked by your provider (another issue i often have to fix at work)

 

[NeverBackDown]

What do you mean by unfortunately?

Regardless of 2FA or not. If there is a security breach. Epic will still tell you to change your password. And if you are willing to use 2FA, then it means you are more conscious about security, so will follow protocol and change it. Your details are more secure yes. It doesn't change the fact that one of your security firewalls has been compromised.

The drawback at times is you need your mobile device nearby. I work with them all day every day. To have to keep it at hand for this too is bothersome for me. Not to mention the reliance on the A2P service being operational and not suddenly blocked by your provider (another issue i often have to fix at work)

Not to mention if they can get into the Database and steal passwords they also can steal your phone number then while they are at it change everything to something they have access to then boom doesn't matter anyway.

Benefit is password and phones should be using different hashes to make this more difficult to crack. But if using the same algorithm then kinda defeats the purpose of encryption.

 

[looz]

@Warchild unfortunately because a password manager pretty much eliminates password reuse and weak passwords.



Password reuse is a significant security issue and 2FA targets that. So if your password gets phished, at least some services will ask for a second factor before letting someone access your personal data.



Just that other breaches exist doesn't invalidate that. Also, lol at storing passwords in 2020.