Password keeps clearing

[Mark Sir Link]

My password keeps clearing from v6 client rather than remaining saved, the only thing I can think of that might possibly have caused this was a change in my IP address while I was using a VPN connection and opened the client.

I'm not sure ~why~ the client would feel the need to clear out my password whenever my IP address changes? It gets really frustrating and I just wind up not logging on at all rather than have to go to my inbox and dig out the password once again.

[Emera]

http://forums.graalonline.com/forums...hp?t=134265692

[Mark Sir Link]

Originally Posted by Emera

http://forums.graalonline.com/forums...hp?t=134265692

in the end this is a much more descriptive thread title and poses some actual reasoning for why it may have happened

[fowlplay4]

I experienced similar issues when I had VMWare Workstation installed, I'm under the impression the 'password decrypt' formula includes a part of your hardware that's supposed to be unique but it isn't based on your circumstances so your password just gets cleared every time.

You might as well just store your password in a txt file on your computer, or reset it until you get a nice one you can memorize.

[Felix_Xenophobe]

v5 master race sorry

[fowlplay4]

I believe my password clear was just caused by a Windows Update.

[Fulg0reSama]

v6, Password didn't get cleared, aren't I lucky

[DustyPorViva]

Kept clearing for me too, and spontaneously. I never had it happen before but I opened up v6 the other day and it was cleared. Then I opened it again and cleared again. I have no firewall and it's never happened before so...

[Emera]

Originally Posted by DustyPorViva

Kept clearing for me too, and spontaneously. I never had it happen before but I opened up v6 the other day and it was cleared. Then I opened it again and cleared again. I have no firewall and it's never happened before so...

When I get the old BSOD happens. But I'm starting to think it's not related because of the issues you guys are having too.

[fowlplay4]

V6 should be updated to use a different registry key and use %USERNAME% to 'encrypt' the password.

[Mark Sir Link]

this is really dumb and pretty discouraging from logging in

[BlueMelon]

Originally Posted by fowlplay4

V6 should be updated to use a different registry key and use %USERNAME% to 'encrypt' the password.

Even if it was with md5 it would be fine considering we use generated passwords...

[cbk1994]

Originally Posted by BlueMelon

Even if it was with md5 it would be fine considering we use generated passwords...

Not everyone uses a generated password, and that's still no excuse. Ideally Graal would start using session tokens that are unique to each installation like most other services with a "remember me" feature. Then you could easily void saved sessions if you accidentally checked "remember me" on a friend's computer or something.

[Admins]

For the mobile versions of Graal we plan to introduce a new login system soon. It will still not use passwords (by default) but you have to approve each new installation by email (like computer-id protected accounts right now). Would that also be good for the PC version?

[Andre2006]

Yes what I would like to see is an in-game login like we have, should be able to create a new password without going onto the webpage, and custom passwords please.

I also want to be able to secure my account if I wish like you can now so I have to approve each new computer that tries to access my account.

[fowlplay4]

Originally Posted by Stefan

For the mobile versions of Graal we plan to introduce a new login system soon. It will still not use passwords (by default) but you have to approve each new installation by email (like computer-id protected accounts right now). Would that also be good for the PC version?

No.

The login process for PC is fine, you just need to fix the issues with the password disappearing and let us change our passwords to whatever we want instead of an 8 character length password that only contains lowercase, uppercase, and numbers.

[Emera]

Originally Posted by Stefan

For the mobile versions of Graal we plan to introduce a new login system soon. It will still not use passwords (by default) but you have to approve each new installation by email (like computer-id protected accounts right now). Would that also be good for the PC version?

You're still not getting what we're trying to say. We want to be able to use passwords instead of a jumble of letters and numbers.

[Admins]

Well we are not going to make the passwords more insecure. The new system wouldn't even require passwords, you would only need them to login to the forums or wiki.

[DustyPorViva]

Originally Posted by Stefan

Well we are not going to make the passwords more insecure. The new system wouldn't even require passwords, you would only need them to login to the forums or wiki.

In the other thread you seemed for the idea of letting us choose passwords.

Where do you get your standards for password security because they don't seem like anything that any other sites tend to implement. A short generated password is not very secure when the sign-in method has absolutely no password attempt delay. Graal generated passwords could probably easily be bruted.

Graal is the only site that seems to think it's more secure to generate its password for the users than to let users create their own passwords. Even my bank account lets you make your password.

[Fulg0reSama]

Originally Posted by DustyPorViva

In the other thread you seemed for the idea of letting us choose passwords.

Where do you get your standards for password security because they don't seem like anything that any other sites tend to implement. A short generated password is not very secure when the sign-in method has absolutely no password attempt delay. Graal generated passwords could probably easily be bruted.

Graal is the only site that seems to think it's more secure to generate its password for the users than to let users create their own passwords. Even my bank account lets you make your password.

Case and Point.

[fowlplay4]

Originally Posted by Stefan

Well we are not going to make the passwords more insecure. The new system wouldn't even require passwords, you would only need them to login to the forums or wiki.

You are proposing a change that relies on PC ID staying unique to our machines but proven by other threads that this is not the case and some including myself have seen their PC IDs change for no reason.

Nobody wants to have to approve every damn computer they use to play Graal on. We are content with the current login process (Enter email/account and password, Login).

This thread is about one thing: Getting our passwords to save properly and not disappear for some unknown reason.

We don't need a new login process, we just need it to remember our passwords.

The password thing is just going off-topic, but that's the only other part that really needs to fixed with Graal PC's login process.

[cbk1994]

Originally Posted by Stefan

For the mobile versions of Graal we plan to introduce a new login system soon. It will still not use passwords (by default) but you have to approve each new installation by email (like computer-id protected accounts right now). Would that also be good for the PC version?

Yes, but only if the PCID system is fixed (or it uses some other identifier). Right now lots of people share the same PCIDs, for some people PCIDs change every time they restart or even open the client, etc.

[Crono]

The funny thing about all of this is that passwords were never a security issue.

The only times we had to worry about our accounts being compromised was at your end, be it whenever there was a leak from the support center or a very corrupt high admin. If my bank lets me choose my own 4-digit number password and every other game that I play (hi, I actually play multiplayer games...like...a lot) let's me choose almost whatever I want, then Graal should too.

[Andre2006]

My password got cleared cleared today twice when I swapped routers and I had to approve my computer again in order to play.

[Mark Sir Link]

compounding this inconvenience and annoyance is the inability for me to change my email address.

so not only can I not reliably log in, I also have to worry about having to go to some antiquated e-mail address I have no desire to use and dig through thousands of emails to find the one I need

[Admins]

For storing the password it uses some information of the computer, including your network hardware. That's why it might get cleared if you switch it.

I proposed the new login system to make stuff simplier, will give more information once we have added it to the mobile version.

[DustyPorViva]

Originally Posted by Stefan

For storing the password it uses some information of the computer, including your network hardware. That's why it might get cleared if you switch it.

Why? I switch my internet between my cable modem and my phone connection all the time and having it cleared just because of that is a bit silly and a huge inconvenience.

What's the purpose in that sort of thing?

[Fulg0reSama]

Can someone please speak french for us? Clearly Stefan doesn't understand us too well.

[Emera]

Originally Posted by Fulg0reSama

Can someone please speak french for us? Clearly Stefan doesn't understand us too well.

This. He can write in English, but he can't read it.

[Crono]

Originally Posted by Fulg0reSama

Can someone please speak french for us? Clearly Stefan doesn't understand us too well.

He's German and I'm pretty sure he understands us, just can't express himself the way he wants to.

[papajchris]

This has stopped me from logging on many times, mostly RC. It doesnt seem to happen to client as often, but almost every time I open up RC, there is no password. I just don't bother logging on

[Admins]

Originally Posted by Crono

He's German and I'm pretty sure he understands us, just can't express himself the way he wants to.

Well when I'm ignored then it doesn't make sense to say more than needed. I've said that the goal will be to get rid of password login, the second thing will be to add a way to choose a password when you want to login to the forums or the wiki.

[DustyPorViva]

Originally Posted by Stefan

Well when I'm ignored then it doesn't make sense to say more than needed. I've said that the goal will be to get rid of password login

Pretty sure that wasn't ignored, but that no one liked that idea.

[fowlplay4]

Originally Posted by DustyPorViva

Pretty sure that wasn't ignored, but that no one liked that idea.

and if anything our points were ignored, and Stefan's initial post in this thread completely ignored the actual problem we're experiencing.

A bug in the PC client does not warrant a completely new login system (that we don't want) for PC users.

[Fulg0reSama]

Originally Posted by Crono

He's German and I'm pretty sure he understands us, just can't express himself the way he wants to.

Sorry, Can someone please speak German to properly articulate our concerns and responses back to Stefan so he may respond back more properly. I just don't like miscommunication.

[Crow]

Originally Posted by Fulg0reSama

Sorry, Can someone please speak German to properly articulate our concerns and responses back to Stefan so he may respond back more properly. I just don't like miscommunication.

'kay.

Stefan: Niemand will das Login-System ersetzt haben. Der Thread existiert an und für sich nur wegen des Problems, dass das Passwort im Client manchmal gelöscht wird, obwohl es vorher gespeichert war. Warum überhaupt ein neues Login-System? Das jetzige erfüllt seinen Zweck doch einwandfrei. Das einzige was die Community will ist, dass der Bug gefixt wird, und dass Spieler ein eigenes Passwort wählen können.

[Emera]

Originally Posted by Crow

'kay.

Stefan: Niemand will das Login-System ersetzt haben. Der Thread existiert an und für sich nur wegen des Problems, dass das Passwort im Client manchmal gelöscht wird, obwohl es vorher gespeichert war. Warum überhaupt ein neues Login-System? Das jetzige erfüllt seinen Zweck doch einwandfrei. Das einzige was die Community will ist, dass der Bug gefixt wird, und dass Spieler ein eigenes Passwort wählen können.

Google translator didn't do me any favours when reading this, but I got the gist. Well said.

[Crono]

Originally Posted by Crow

Stefan: Niemand will das Login-System ersetzt haben. Der Thread existiert an und für sich nur wegen des Problems, dass das Passwort im Client manchmal gelöscht wird, obwohl es vorher gespeichert war. Warum überhaupt ein neues Login-System? Das jetzige erfüllt seinen Zweck doch einwandfrei. Das einzige was die Community will ist, dass der Bug gefixt wird, und dass Spieler ein eigenes Passwort wählen können.

take me crow, im yours

[papajchris]

Originally Posted by Emera

Google translator didn't do me any favours when reading this, but I got the gist. Well said.

I think Google Translator did a pretty good job actually:

Nobody wants to have replaced the login system. The thread exists in and of itself just because of the problem that the password is deleted from the client at times, although it was previously stored. Why a new login system? The current does the job but perfect. The only thing the community wants, is that the bug is fixed, and that players can choose your own password.