It seems that you're using an outdated browser. Some things may not work as they should (or don't work at all).
We suggest you upgrade newer and better browser like: Chrome, Firefox, Internet Explorer or Opera

×
An extra layer of protection for you and your account.

Today, we bring you two-step login: an optional extra layer of protection for your GOG.com account. In the coming weeks, we'll also be making all communication between you and GOG encrypted by default with HTTPS everywhere — both methods often requested on our wishlist, but also simply pretty smart to offer.




Two-Step Login
Two-step login is an extra layer of protection for your GOG.com account. Every once in a while, we'll ask you to verify your identity with a 4-character security code sent to your email. Simple stuff.

Two-step login is optional, but we really recommend it. It's designed to bug you only when we notice something unusual — like logging in from a new browser or location. By doing this, we make sure that there's no way to gain unauthorized access to your GOG.com account without both your GOG password and your email account. When used to its full potential with unique passwords for every account, two-step login can be virtually impenetrable.

To enable two-step login, simply head to your Login & Security settings, verify your email address, and enjoy the extra peace of mind. For more information, check out the FAQ.




Additionally, you can now end all of your active GOG.com sessions in one click — this includes every device or browser you ever logged in through. It's a handy feature if you've recently used a public computer, or if you simply want to be sure no device is still logged in to your account.







HTTPS everywhere
GOG Galaxy has already supported HTTPS everywhere for some time, and now we're beginning to roll it out globally. That means HTTPS support for every connection between you and GOG.com — all secured with industry-standard encryption. Every bit (and byte) of data that travels between you, us, and everyone on GOG.com will be encrypted, including the store, forum, chat, downloads and even all of GOG Galaxy. It truly is HTTPS everywhere.
Well I'm all for security. Pretty sure I have a firefox setting enabled to default to https:// for my connections to GOG normally, but maybe I didn't can't really tell now.

So like the https: everywhere. Enabled the 2 step as you call it. Will see how that goes, hopefully isn't too annoying.

Now to go to bed, and secure some dreams.

forgot to say, very much appreciate the logout all sessions option. Very nice.
Post edited March 07, 2016 by deonast
Can't 2-step auth be done with an application such as authy? Already using it for Twitch and Humble Store. It's nice because you don't have to be connected with your phone...
avatar
AndyM77: Edit: Interesting how Galaxy client identifies itself as Windows 8 and Chrome 43.0.2357 on a Windows 10 machine, yet I have chrome version 48.0.2564 installed as my regular browser.
I got the same thing on the confirmation email. I suppose Galaxy is using an older version of Chrome for its browser component, but it is strange that it's identifying the OS as Windows 8 (I'm also on Windows 10).
cool
Thanks for this.

I'll add I that I really don't want anything third party involved in my use of this site I dislike the captcha on code redemption enough as is.
2F enabled, no issues so far, thanks. I have been using https everywhere (the FF plugin with the same name), so I think the second change doesn't affect me, but cool anyway.
high rated
I appreciate extra security that doesn't come in the form of a dumb mobile app.
avatar
Justin_Brett: I appreciate extra security that doesn't come in the form of a dumb mobile app.
That does not support all the funny operating systems I tend to have on my mobiles....


Thank you GOG for these three excellent updates! :-)
Enabled. Thanks GoG!
Thank you, GOG.
Plus I like the idea of logging out all connected devices. Steam and co. would wish for that!

EDIT: However, it sort of didn't work with my Galaxy. No stranger prompt to tell me to login because my last session was disconnected or whatever.
Post edited March 07, 2016 by PookaMustard
thank you gog! enabeld it!
Finally!
Site & security improvements?? Yeahhh!!
Post edited March 07, 2016 by phaolo
Well done, GOG!

Glad to see some actual Good News here from time to time. :)
Nicely done GoG :)

Hope it doesn't break my script though... XD