Blizzard Authenticator: No more stolen Warcraft Accounts
The Blizzard Authenticator was announced only a couple of days ago and it’s already sold out. Based on the famous Secure ID tokens, the device is actually pretty simplistic. It merely displays a six digit number changes every minute or so.
When logging in users will now be presented with two password fields. The second password field is for the six digit number displayed on the token and will help provide an extra layer of protection for hacked and stolen accounts. Only physical access to the Authenticator will allow someone to get connected.
No doubt scams attempts will pop-up, users will get IM’s or phone calls from people pretending to be from Blizzard and asking for the current password on the Authenticator. But over all this will drastically reduce the number of scams.
These Authenticators will actually be very hard if not nearly impossible to hack. They are used heavily in any industry and in Governments to create secure connections to remote servers, or to provide a fairly simple but amazingly robust authentication scheme. Better yet, throw into many wrong attempts and the cards automatically gets locked out.
Each token is originally setup with a complex mathematical equation that is based off the serial number AND the number that is on the Authenticator when you call to activate it. When the number changes, that number is entered in on the server side by Blizzard and the Authenticator is then activated. This makes it impossible to login in with a different Authenticator as the passwords simply will not match.
Since the Tokens are serialized and only good for one account, this will actually help make account trades or buying/selling accounts safer as a physical item will now need to be shipped with each account. With the addition of tracking a package charge backs should be a thing of the past as users will no longer be selling “just a virtual item.”
In my opinion, any serious account buyers and sellers should start demanding this step. It’s only $6.50 (plus tax and shipping,) and will add so much to the security of an account that it’ll be pretty hard to loose the account to a scammer from now on.