It seems that you're using an outdated browser. Some things may not work as they should (or don't work at all).
We suggest you upgrade newer and better browser like: Chrome, Firefox, Internet Explorer or Opera

×
An extra layer of protection for you and your account.

Today, we bring you two-step login: an optional extra layer of protection for your GOG.com account. In the coming weeks, we'll also be making all communication between you and GOG encrypted by default with HTTPS everywhere — both methods often requested on our wishlist, but also simply pretty smart to offer.




Two-Step Login
Two-step login is an extra layer of protection for your GOG.com account. Every once in a while, we'll ask you to verify your identity with a 4-character security code sent to your email. Simple stuff.

Two-step login is optional, but we really recommend it. It's designed to bug you only when we notice something unusual — like logging in from a new browser or location. By doing this, we make sure that there's no way to gain unauthorized access to your GOG.com account without both your GOG password and your email account. When used to its full potential with unique passwords for every account, two-step login can be virtually impenetrable.

To enable two-step login, simply head to your Login & Security settings, verify your email address, and enjoy the extra peace of mind. For more information, check out the FAQ.




Additionally, you can now end all of your active GOG.com sessions in one click — this includes every device or browser you ever logged in through. It's a handy feature if you've recently used a public computer, or if you simply want to be sure no device is still logged in to your account.







HTTPS everywhere
GOG Galaxy has already supported HTTPS everywhere for some time, and now we're beginning to roll it out globally. That means HTTPS support for every connection between you and GOG.com — all secured with industry-standard encryption. Every bit (and byte) of data that travels between you, us, and everyone on GOG.com will be encrypted, including the store, forum, chat, downloads and even all of GOG Galaxy. It truly is HTTPS everywhere.
nice, thank you
Well at least security will be better than it was on the Linux Mint site.
cool
thank you gog.
high rated
When I read "two-step login" I was afraid GOG would be adding "secret" questions to the login. Thos things need to die, there is nothing secret about my mother's maiden name. The only way to make the actually secret is to make up an answer, and when you do that you have effectively two passwords instead of one.
high rated
Well https is very welcome. Two step login is to much a bother for me since everywhere it is implemented it buggs me all the time to input the special code sent to email cause off new browser, different OS, etc. so won't use that. Anyway nice improvement.
avatar
GOG.com: It truly is HTTPS everywhere.
Well, everywhere but not here for sure ^o^

Screenshot attached
Attachments:
gog-https.jpg (126 Kb)
high rated
Thank you so much for making two-step login optional. It's a real pain on other sites and I'm glad I don't have to do it here.
This is excellent news. Cheers!

EDIT.
It might also be a good idea to add an optional number pad so the user can use mouse clicks to enter the security code. Could help reduce the effect of keyloggers.
Post edited March 07, 2016 by senbon
So long as it's optional. If I have to go to the other side of the building just to log on I swear I coming back with a bazooka and tossing out bodies! :P
high rated
avatar
GOG.com: It truly is HTTPS everywhere.
avatar
catpower1980: Well, everywhere but not here for sure ^o^

Screenshot attached
good point, that why we posted "and now we're beginning to roll it out globally". It will be changed step by step, please be patient :)
Awesome feature :)
avatar
songoqu: It will be changed step by step, please be patient :)
Having been on this website for so many years, I don't mind waiting a few days ;)
Glorious news!