Two-factor authentication at Logon WoWCircle

[VúSale]

Dear players! We are glad to announce, that we have implemented two-factor authentication to Logon WoWCircle 3.3.5a and 4.3.4

Simplified way to enable 2FA in your control panel.

---

Recommended to use

Desktop application setup:
1. Enter https://authy.com/download/, download application for your phone/pc or browser.
2. Launch application and pass the simple registration, choose your Country, type in your cell number and enter the code, that you receive via SMS.
3. In launched application add account for one-use passwords generation, open Tokens tab, and click "+".
4. After that proceed to your game client and type the secret key into Authy application "Enter Code given by the website" field, click "Add Account" and type Account Name and "Generic Black" icon, do not touch other options and click "Save" to receive a window with one-use code, active for 30 seconds.
5. Click "Accept" in a "secret key" window of your game client, type your one-use code from the application and click "Accept"
6. If you did well, you will see "Two-factor authentication has been successfully enabled" message.
- If you get "TOTP code does not match, please repeat the operation", start again from the 3 step.
7. After that you will have to enter your current password and the application key to log in.

Mobile Application setup:
1. Download Authy for IOS/Android
2. Pass authorization, choose your country, type your cell number, and choose "SMS".
3. After authorization click + and "Enter Code Manually", in a window, type the secret key, into Enter Code Manually field and click OK. After that you will have to enter (and remember)the password for backup and account name (as you please).
4. Proceed with actions, described in step 4 upper in this thread
5. After that you will have to enter your current password and the application key to log in.


Pros and cons of Authy authentication
+ cross-platform (IOS/Android/Windows/Mac/Google Chrome extension).
+ if you lose your phone, you can always restore access, just do not forget or remove Backups Password in advance.
- english interface (some people consider it to be a positive side).

---

Yandex.Key

Application setup:

1. Download app for IOS/Android
2. Open application, and press "Add account", use your camera to scan QR code from our CP.
3. You account login window will appear, with a one-use 6 number password, you need to type [HERE]
4. Press ОК, confirm operation via email, that's all. If you IP changes, you will need a 6 number key from this app to log into CP or a game client.
5. Then move to settings and make a backup, use your phone number and a password that you will definitely remember.
- this is done to restore your data if you delete an app or lose your phone.

Pros and cons of this way:

+ you can make a backup of keys in apps settings.
+ you can use fingerprint/faceID to log in
- only mobile application.

---

Some more useful information

1. Try to save 16 number code somewhere, if you lose your phone, or lose access to authy/yandex.key, you can always restore access, repeating the operation, but with your personal code.
- you don't need this, if you follow all our recommendations and have backup of your keys.
2. You will need to enter your password + code from 2FA app to enter CP/Game server.
3. You will need to enter 2FA code only when you login from another IP.
4. You can only disable 2FA via control panel.
5. You must never delete mobile application (if you have no backup) before you disable 2FA, otherwise you will lose access to your account as soon as your IP changes.
6. 2FA code entrance is only available at 3.3.5 and 4.3.4
7. ATTENTION! For enabling 2fa, you can get a unique shirt via .menu(https://wowroad.info/?spell=38057) => "Actions with the character".
8. Players, who can not delete/disenchant/send items after IP address change, just enable 2FA and you will be able to delete/disenchant items after 7 days even if your IP changes again.

Considering more often thefts of resources, we spread our protection more, now it will work for all operations with items/gold/badges, that means if your account has a strange IP address, not common for it, the following features are blocked for 7 days:


1. Deleting 258-284 ilvl gear
2. Buying or selling anything using vendors or auction house, including items lower than 258 ilvl.
3. ALL items/gold trade/sending by mail/selling at auction is blocked.


To remove restriction №1(works since 2020), you need to either enter the game with the same IP during 7 days, or just enable 2FA.


To remove restriction №2 and №3 without waiting for 7 days, you need to type .menu in a game chat, proceed to "Actions with a character", click "Verify email", click "Accept" in a popup window, after that type your email address used on current account into "Please enter code" window, and click "Accept" with a MOUSE BUTTON, + we recommend to enable 2FA.

Step-by-step

1. Type .menu command, select "Actions with a character"



2. Select "Verify email"



3. Read the information window and click "Accept"



4. When the last "Please enter code:" window appears, type in your email binded to current account.



5. If you've entered correct email, you will see "The verification is passed" message in chat, and 2 and 3 restrictions will be removed, but deleting/selling 258-284 ilvl gear will still be blocked.

[свернуть]

I don't remember my email, what should I do?

If you do not remember you email (login), contact you realm Game Master to get an english form to fill and create a thread in an appropriate section:
For х1 create your thread there https://forum.wowcircle.com/forumdisplay.php?f=1748
For х100 create your thread there http://forum.wowcircle.com/forumdisplay.php?f=1007
For FUN'a create your thread there http://forum.wowcircle.com/forumdisplay.php?f=1076
For х5 create your thread there https://forum.wowcircle.com/forumdisplay.php?f=1700
For cataclysm x100 create your thread there https://forum.wowcircle.com/forumdisplay.php?f=1904

[свернуть]

This protection system is already actual for all WoTLK realms.

[VúSale]

Considering more often thefts of resources, we spread our protection more, now it will work for all operations with items/gold/badges, that means if your account has a strange IP address, not common for it, the following features are blocked for 7 days:


1. Deleting 258-284 ilvl gear
2. Buying or selling anything using vendors or auction house, including items lower than 258 ilvl.
3. ALL items/gold trade/sending by mail/selling at auction is blocked.


To remove restriction №1(works since 2020), you need to either enter the game with the same IP during 7 days, or just enable 2FA.


To remove restriction №2 and №3 without waiting for 7 days, you need to type .menu in a game chat, proceed to "Actions with a character", click "Verify email", click "Accept" in a popup window, after that type your email address used on current account into "Please enter code" window, and click "Accept" with a MOUSE BUTTON, + we recommend to enable 2FA.

Step-by-step

1. Type .menu command, select "Actions with a character"



2. Select "Verify email"



3. Read the information window and click "Accept"



4. When the last "Please enter code:" window appears, type in your email binded to current account.



5. If you've entered correct email, you will see "The verification is passed" message in chat, and 2 and 3 restrictions will be removed, but deleting/selling 258-284 ilvl gear will still be blocked.

[свернуть]

I don't remember my email, what should I do?

If you do not remember you email (login), contact you realm Game Master to get an english form to fill and create a thread in an appropriate section:
For х1 create your thread there https://forum.wowcircle.com/forumdisplay.php?f=1748
For х100 create your thread there http://forum.wowcircle.com/forumdisplay.php?f=1007
For FUN'a create your thread there http://forum.wowcircle.com/forumdisplay.php?f=1076
For х5 create your thread there https://forum.wowcircle.com/forumdisplay.php?f=1700
For cataclysm x100 create your thread there https://forum.wowcircle.com/forumdisplay.php?f=1904

[свернуть]

This protection system is already actual for all WoTLK realms.

---

All this protection from deleting/selling/trading items can be disabled, just open .menu => settings, and click "Disable IP verification".
For example we have some players who does not want to use 2fa and they enabled it only to delete items, now they can disable 2fa and still have an option to use items/currency without any restrictions.


This feature becomes visible if you meet one of two existing criteria:


1. You have been entering the game with the same IP during 7 days and have no item deleting block for 258-284 gear.
2. You have enabled 2fa for some period of time (7 days also).


Want to warn you that disabling protection = accepting any risk responsibility if we talk about getting access to your account by other players.
For example, if you lose any resources, gold, badges, etc. and you have disabled protection, neither you will get any help from techincal support, nor a thief will get banned, you will get an answer like: you disabled protection, , but we can not help you.
We recommend to think twice before disabling this protection measures, because as we already told numerous times - we do not implement anything without purpose.


p.s if you disable the restrictions, at lease change you password every 3-5 months, and use unique email, not similar to your account login, this is recommended for all internet resources.