WOW:Authenticator

Blizzard Authenticator

The authenticator consists of a 6 or 8 digits number generator that the server will use to make sure that you are the actual owner of the account logging in. Knowing the username and password isn't enough. The generator can be a stand-alone device (as sold by Blizzard and called Key Fob), an iPhone/iPod Touch application or application for other supported cell phones.

The numbers generated are predictable in nature so that the server can come up with the same number as your authenticator at the same time. How that happens is the secret sauce and a well guarded secret. However, even if that secret got out, it still wouldn't make your authenticator vulnerable. The seed that starts the sequence when the Authenticator begins its life is based on a range of variables, many of them random. So for someone to figure out exactly the sequence of numbers generated by your authenticator, that person needs to know precisely the algorhythm used and the parameters that built the start of life of your Authenticator. Quite a lot a work just to get into one account.

Here are some of the questions frequently asked on the forums.

What Is It?

Keychain Authenticator

iPhone Authenticator

The Blizzard Authenticator is a physical key fob while the Battle.net Mobile Authenticator is a mobile phone application that generates an 8 digit code that is entered after entering your World of Warcraft Password. This second factor of authentication helps to secure your account from being hacked.

I change my password frequently, I don't need one.

Are you sure? Brute force attacks are more common then you might think. In the time between password changes, a hacker could get in your account. With the ever changing authentication code, you won't have to worry about that.

What's in it for me?

Besides security of your account, you also get a cute little Core Hound Pup. [Core Hound Pup Image]

How bad is getting hacked, really? Its just a game, and Blizzard can replace everything right?

If you are hacked, the process for restoring your character to its default state can take weeks. You'll first need to contact Blizzard to verify your account (as most hacks result in the account being locked out), change your password, and unlock your account. Once this is done, you'll need to login to each character you have and take inventory of what's missing. You'll then need to submit a GM Ticket with a list of the missing items from each character for them to restore... and then you wait. The ticket will be escalated from a GM to a specialized team. That team will investigate your situation, and once verified, will mail you your items and gold back.

1. This process can take 2 or more weeks depending on many factors including holidays, how many hacks are occurring, etc.
2. You may not get all items back. Some items or gold amounts may not be restored.
3. During this time, its likely you've been cleaned out... no armor, no money, no mana-replenishing drinks, nothing.

Where do I get one?

You can get the Blizzard Authenticator Key Fob from the Blizzard Store here. [1] The key fob costs US$6.50.

You can get the Battle.net Mobile Authenticator for the iPhone or iPod Touch here. [2] The application is Free.

You can get the Battle.net Mobile Authenticator for Android . . . Oh wait, you can't. [3]

You can get the Battle.net Mobile Authenticator for other phones on US/EU Carriers here. [4] The application costs 99¢US.

Guild Policy

There isn't one. Alea Iacta Est does not require any of its guild members of any rank to have an authenticator.

(Wyndgem Writer's Note) However, I strongly encourage everyone to get one for security of a guild member's own account.

Shouldn't Guild Officers be required to have an authenticator?

The argument of Guild Officers being required to have an authenticator has been made to primarily protect the guild bank. The counter argument is: Have you seen our guild? Alea Iacta Est is one of the largest guilds in the game. With the number of people, especially the number of generous people, if a Guild Officer's account is hacked and the guild bank is emptied, the bank would be refilled in no time.

What about the Guild Master?

Maui has an authenticator.

What does Ingvar the Plunderer think?

Ingvar the Plunderer says (in a posh British accent), "Really, get an authenticator.... or I WILL PAINT MY FACE WITH YOUR BLOOD!!!!"