Hi team,
Seems the Bless team is taking an approach to security such as Safe Mode. However, I feel it could be a bit better. Players have a lot of a valuable items on Bless servers, security is a must.
Has the team considered implementing multi-factor authentication that integrates in both web and in-game?
For Web Approach
- Bare Minimum: ask for second factor code when login in (player's choice)
- Enhanced: ask for second factor code when doing transactions such as selling items, or buying items that are 100 bons+ (these kinds of things should be a toggle for players which level they want)
For In-game Approach (most important)
Other Mu private servers have the ability to use multi-factor inside the game, with commands such as /lock (usually happens automatically on new IP login) and /unlock <2nd factor token>.
Besides that, players could select the level of security they want when their account is in "locked" state, such as:
- No trading
- No teleport
- No /post
- No chaos machine at all
- etc.
Again, Safe Mode is similar to this, but not practical. Players should be able to easily lock or unlock their account, in addition to having more control to what level of security they want, and when.
Let me know your thoughts.