I got hacked and all my items was stolen, Path Of Exile 2.

"

Vetalyko#1169 wrote:

"

wimm2014#0791 wrote:

"

_N0ctus_#6387 wrote:

Optionally - why not - mandatory - no thanks.

Also even 2FA wont help you if you for example have an easy or the same password on your mail etc.


There also isnt much incentive to even do that in the first place since how are they going to make money with this? GGG can simply disable everything without a problem and they cant really sell it for RL money.

It's help very good, i got my phone number authorization every time it's log-in from different place. If 2FA was a thing in PoE2 i wont lost everything that i farm 2 weeks in a row. Im playing from steam without login or password information btw. And i have no clue standalone client dont have 2FA like PoE1, I never changed password because i know about code from email, but after i got hacked and lost everything now i know about 2FA not a thing in PoE2, but WHY?

Alas, even 2FA can't always protect against hacking. About a year ago, I got hacked into steam after downloading a gamepad empowerment program from an untrusted site, and even though I had 2FA, I didn't get any notifications of login attempts. Turns out hackers can bypass that protection even in steam, at least if they got some data from your computer.

Im not stupid and can analyze all network traffic by every process to know that data not stolen from me, no clue how it's happened still. Playing only from steam. No one trying to log-in in email or steam. As i know after some tests people can log-in from standalone client even if you attach steam. My friend asking his sister to trying log-in from standalone client from 1000km away, and sister just log-in without any notifications to email about new location or something. I bet GGG dont know about it. Hope it's get fixed very fast. Im now playing from new account, bought new key, because they asking to clear my pc and change everything, they asking me to change steam email and password for 0 reasons, and now they not answering. I had not even similar password in poe and steam and also emails are not the same. They clearly see if you log-in from steam or standalone. I bet there is weakness they would fix later, but for now everyone can be hacked if hackers know only your log-in email.

Yeah also happened to me today - mwbytes scan clean, log-in code only came in when i woke up to login after sleep - so attacker didn't need to enter code....

Already have emailed support but since it's holidays and number of requests it'll probably take several days to get any response.

Well, if my experience is anything to go by on an unrelated issue, you may want to change that to 'take several weeks to get any response.'

BUMP, bring 2FA GGG