adaliabooks: You've clearly not read all the thread...

mrkgnao: You obviously did not read the thread you link to.

mrkgnao: I travel quite a bit, so not planning to use this feature in its current implementation.

ZFR: OK, I agree that requesting a code when cookies are cleared or new broswer used is a bit extreme, but surely asking for it logging from a new location is pretty standard and many sites implement this.

timppu: feeling like everyone else had swallowed a crazy pill.

mrkgnao: I'm not so sure how standard it is. I have never come across any website that requires authentication from a new location. I do have several services (gmail, yahoo mail, amazon) that notify me about such things (which is what I would expect), but none that require me to take any active action.

mrkgnao: I'm not so sure how standard it is. I have never come across any website that requires authentication from a new location. I do have several services (gmail, yahoo mail, amazon) that notify me about such things (which is what I would expect), but none that require me to take any active action.

Matruchus: Humble and Steam do that all the time. Same if I shut my pc down and change from Linux to Windows it needs another code input on those websites in order to access my accounts.

OldFatGuy: By the way, why is there complaining about this? It's like complaining about Galaxy... I don't get the point. If this (or Galaxy) isn't what you're looking for or hoping for, then, ahm, you know, don't use it. I have never once complained about Galaxy because I have never once used it. And if this added security isn't exactly what you were looking for, then... don't use it? What am I missing here? (Unlike the first part of this post, this is a real question.)

mrkgnao: I'm not so sure how standard it is. I have never come across any website that requires authentication from a new location. I do have several services (gmail, yahoo mail, amazon) that notify me about such things (which is what I would expect), but none that require me to take any active action.

mrkgnao: Simple. I want GOG to add security against hacking. The solution they have implemented does not do that (for me). I complain.

OldFatGuy: Every. Single. Financial site uses this. My banking accounts. My credit card accounts. All of them. If I try to sign in from a different computer (or this one if I've recently cleared cookies) then I have to go through the process of security codes again. It is pretty standard for nearly every financial type account online out there.

OldFatGuy: Every. Single. Financial site uses this. My banking accounts. My credit card accounts. All of them. If I try to sign in from a different computer (or this one if I've recently cleared cookies) then I have to go through the process of security codes again. It is pretty standard for nearly every financial type account online out there.
OldFatGuy: So your complaint is against GOG for not implementing what you want. It shouldn't be directed at this new OPTIONAL two step sign in. I'm not saying I don't get complaining about features that you want but aren't there. What I don't get is complaining about a specific feature (like Galaxy or this) that is completely optional and if it isn't what you want, then don't use it.

timppu: I do complain. GOG gave it as "all or nothing". I want two-step verification, but not every damn time I log into GOG (from a clean browser).

Why do I seem to be the only person in the universe who thinks two-step verification is most sorely needed for when:

- changing the email address
- changing the password

The rest is less important. I can live with the thought that some hacker was able to log in as me, as long as he can't perform those two actions. After all, what can he do, besides downloading my games, writing trash messages as me, and buy some new games to my GOG account with his own credit card?

Then as long as GOG informs me to email that some evildoer from a new IP address/country logged in as me, I can react myself, like change the password myself, and reset all GOG logins from all sites.

EDIT: Thank god, nightcrawler is thinking similarly as me. Good, I am not alone then, feeling like everyone else had swallowed a crazy pill.

nightcraw1er.488: Sorry, I agree with Mrkgnao.

OldFatGuy: I'm happy that you and Mrkgnao haven't experienced this. That doesn't change the fact and it is a fact that It is standard for banking sites. Maybe not Paypal (which isn't really a bank) but for banking sites, I've used Citibank, I've used Chase, I've used NIH Credit Union, I've used a local bank, and for credit cards I've used Discover and American Express and on each and every one of those, if I try to log into my account from a different computer (or this one if cookies have been cleared) I have to have a security code emailed to me (and in the case of my local bank (Middleburg Bank) my home phone automatically rings with a four digit code to input if I try to log in from a different computer (or this one after clearing cookies). It's not one of those, it's not most of those. It's every single banking account and credit card account that I have (and that total is over a dozen). It's obviously standard policy at banking sites.