It seems that you're using an outdated browser. Some things may not work as they should (or don't work at all).
We suggest you upgrade newer and better browser like: Chrome, Firefox, Internet Explorer or Opera

×
Community
General discussionTwo-Step Login & HTTPS Everywhere(288 posts)(288 posts)
(288 posts)
Pages:
1
2
3
4
5
10
15
20
This is my favourite topic
Posted March 07, 2016
An extra layer of protection for you and your account.

Today, we bring you two-step login: an optional extra layer of protection for your GOG.com account. In the coming weeks, we'll also be making all communication between you and GOG encrypted by default with HTTPS everywhere — both methods often requested on our wishlist, but also simply pretty smart to offer.




Two-Step Login
Two-step login is an extra layer of protection for your GOG.com account. Every once in a while, we'll ask you to verify your identity with a 4-character security code sent to your email. Simple stuff.

Two-step login is optional, but we really recommend it. It's designed to bug you only when we notice something unusual — like logging in from a new browser or location. By doing this, we make sure that there's no way to gain unauthorized access to your GOG.com account without both your GOG password and your email account. When used to its full potential with unique passwords for every account, two-step login can be virtually impenetrable.

To enable two-step login, simply head to your Login & Security settings, verify your email address, and enjoy the extra peace of mind. For more information, check out the FAQ.




Additionally, you can now end all of your active GOG.com sessions in one click — this includes every device or browser you ever logged in through. It's a handy feature if you've recently used a public computer, or if you simply want to be sure no device is still logged in to your account.







HTTPS everywhere
GOG Galaxy has already supported HTTPS everywhere for some time, and now we're beginning to roll it out globally. That means HTTPS support for every connection between you and GOG.com — all secured with industry-standard encryption. Every bit (and byte) of data that travels between you, us, and everyone on GOG.com will be encrypted, including the store, forum, chat, downloads and even all of GOG Galaxy. It truly is HTTPS everywhere.
Posted March 07, 2016
Finally! Thank you.
Posted March 07, 2016
Thanks! Very good that it's optional, then we can skip the annoying whine-threads about it.
Posted March 07, 2016
avatar
GOG.com: It truly is HTTPS everywhere.
avatar
catpower1980: Well, everywhere but not here for sure ^o^

Screenshot attached
How did you get that number by "ACCOUNT" up so high?
Posted March 07, 2016
Finally! I was one of the most vocal ones who asked for this, and I've activated it as soon as I saw this :)
Thank you!
Posted March 07, 2016
high rated
avatar
GOG.com: It's designed to bug you only when we notice something unusual — like logging in from a new browser or location.
The problem is that this "unusual" behavior seems to be the default for me. It's like that on Humble, I need to enter a code EVERY time I log in because apparantly I'm always using a "new" browser when I start a new browser session. Not sure if this is to do with me regularly cleaning out cache and cookies, or dynamic IP or whatever ... :/
Post edited March 07, 2016 by Leroux
Posted March 07, 2016
Good :-)
Posted March 07, 2016
avatar
catpower1980: Well, everywhere but not here for sure ^o^

Screenshot attached
avatar
dtgreene: How did you get that number by "ACCOUNT" up so high?
Because I spend my time with the secret brotherhood of the forum but as its name implies you have several tests to pass if you want to get in our circle and chat all day long :o)

Or maybe because I just don't click on updated games in my library.... ^o^
Posted March 07, 2016
high rated
Does the second step -have- to be e-mail verification? I would much rather rely on TOTP.
Posted March 07, 2016
high rated
Finally, nobody with access to my traffic can see anymore if I am looking at the game page of a serious city building and management game or Huniepop. *cough*

Edit: Would also prefer TOTP.
Post edited March 07, 2016 by The-Business
Posted March 07, 2016
Excellent, thank you.
Posted March 07, 2016
avatar
Leroux: The problem is that this "unusual" behavior seems to be the default for me. It's like that on Humble, I need to enter a code EVERY time I log in because apparantly I'm always using a "new" browser when I start a new browser session. Not sure if this is to do with me regularly cleaning out cache and cookies, or dynamic IP or whatever ... :/
Most likely cookies. I rarely clean cookies from sites I visit usually or trust and I never get that question from those sites. I suggest keeping cookies from sites you trust.
Posted March 07, 2016
It's good to finally have 2-factor auth, but I wish there was support for Google Authenticator - I'd feel better about having a device-based key than just a regular email.
Posted March 07, 2016
Thanks GOG team for making this site / store even better. :)

Edit: Interesting how Galaxy client identifies itself as Windows 8 and Chrome 43.0.2357 on a Windows 10 machine, yet I have chrome version 48.0.2564 installed as my regular browser.

So, this 'Might' confuse the slightly less technically minded. (I know a lot of W10 apps still identify themselves as Windows 8 versions, so this could simply be a legacy of that )
Post edited March 07, 2016 by AndyM77
Posted March 07, 2016
Finally. Great :).
Posted March 07, 2016
avatar
GOG.com: It's designed to bug you only when we notice something unusual — like logging in from a new browser or location.
avatar
Leroux: The problem is that this "unusual" behavior seems to be the default for me. It's like that on Humble, I need to enter a code EVERY time I log in because apparantly I'm always using a "new" browser when I start a new browser session. Not sure if this is to do with me regularly cleaning out cache and cookies, or dynamic IP or whatever ... :/
It seems to be ok here. I have automatic erasing of cookies and cache on browser closedown and it seems to be ok on gog with two step login activated. On Steam, Humble and elsewhere its a real pain with constant code requests.

Its also possible that gog hasn't yet implemented two step login fully since the blue mentioned they rolling security updates out for a few days.

Edit: The system works now exactly the same as on Steam and Humble. Constant code requests after closing the browser and loging in. Had to disable two step login.
Post edited March 07, 2016 by Matruchus
Pages:
1
2
3
4
5
10
15
20
This is my favourite topic
Community
General discussionTwo-Step Login & HTTPS Everywhere(288 posts)(288 posts)
(288 posts)