GreatAnubis: Oh man, thanks for the info. This 2FA drives me crazy. Why can't I authorize MY OWN PC at home once for good? I'm the only person accessing GOG from this PC. This kind of 2FA protects my account from being accessed by myself, really.
Finally disabled this nonsense.
Yes, you can authorize your own PC at home. That's what
cookies are meant for. But let me guess: You set your browser to delete every single cookie on exit because somebody told you they were used to "spy" on you?
If instead you keep GOG's authorization cookies, you can stay logged in for a very long time. Despite active 2FA, I can't actually remember the last time I had to do a login myself, must have been almost a year.
Disabling 2FA is a security risk. It hurts you more than it helps you. Because it enables random people on the Internet to try and brute force your password. They don't need access to your PC for that.