Skype Two Factor Authentication Requirement.

[Sephiroth]

Due to recent events, I was pondering this idea. It would be a great suggestion if staff required two-factor authentication on all skype accounts that are used to TRADE with, and also require they be linked to a Microsoft account (has to be linked for two-factor to work).

UPDATE!!


THIS WOULD MEAN: Users must USE a live:(username) Skype handle, as those are the only ones protected.

Basically it works like this, all skype accounts created before SKype was bought out by MS can log in via a "Skype Username" and even afterwards too if you signed up that way. These accounts can login without having to go through Two-Step Verif.

SO.... If you create your skype account by logging in with your Microsoft Account, that will ALWAYS be the only way you can login to it (Which adds the protection of two-step verif and means you would have a "liveusername)" Account)

It is very simple to do and would prevent "Hacked" Skype accounts. If you do not know what two-factor auth is, look it up. Basically anytime ANYONE logs into a skype account with two-factor, they must enter a 6 digit random code generated on their phone, tablet, etc. The user could request a screenie to prove it has two factor enabled and you could also prove a skype user is linked to a Microsoft Account by viewing their skype profile and making sure their username has "live:" in it.

It greatly increases security, and the only true way their skype could be hacked is if someone bypassed the two-factor auth on the microsoft account. Because even IF you try to recover the password or what not, you would STILL have to have that persons mobile device to get the two factor code!! Just my two cents, if anyone agrees, show your support!

ALSO, this would work in conjunction with Windows Live Messenger as well as Sythe itself.



The ONLY downside to this, is that all Market users would simply need to unlink any existing skype account they have linked with their Microsoft Acct and create a NEW Skype through the MS Acct, instead of merging it.

 

[R]

I was going to get on this following recent events

 

[FireZ]

Looking into this as I type

 

[Lorenzo]

I support this and think it's a great idea would cause less issues.

 

[WolfRunescape]

Yo can you message me how to set this up, i support the idea

 

[FireZ]

My skype is now 2 factored. I'd like to see this get as widespread as possible




Skype > Account Settings > wait for page to load > account settings bottom right > link ms account - go from there inside ms account is where you turn on 2 factor. Then when you try to sign into skype its needs the 2 factor code.

Anyone needing help post here we will get you all set up

 

[Pieyou]

My support is in favor of this. No reason not to have extra security. Especially following this whole, Leanbean, shabang

 

[Aesiir]

Support this. It's a fantastic idea and makes everything more secure. I feel like this is a great step toward beating scammers.

 

[SkullPi]

Such an awesome suggestion. This can help keep Sythe's marketplace safer from scams and hackings.

Thanks, I will try to enable it on my account as well.

 

[FireZ]

2 factor your sythe accounts as well

 

[Sephiroth]

I thank you guys for your tremendous support and as such I will now provide a tutorial on how to do this! See OP once I am done



TUTORIAL added! Check OP as of 7/29/2014 @ 5:23 PM PST

 

[Josh0is0here]

Thanks for the help, I just 2 factored my Skype login

Completely support this

 

[Sephiroth]

Thanks for the help, I just 2 factored my Skype login

SO do you support that this be a Sythe RULE for skype trades and a requirement for staff and its users??

 

[Vic]

I support this rule

 

[Sephiroth]

Ok guys there seems to be a hitch to this that me and Roary found. It seems that if you have a reqular skype name user account, that even if you LINK it to your MIcrosoft acct, you can still login to it via skype name, thus bypassing the system or the twoo-factor authentication....


THIS IS RETARDED mind you, as its MS's fault as well as skype's. So, as such I have updated my suggestion to require an amendment to the rules that anyone who trades over skype MUST have a liveaccountname) account, which are the only ones that can be protected via 2-Step Authentication.

SEE OP

 

[FireZ]

You can use hotmail as well. just 2 fa the hotmail, the skype and your ms account

Its a pain in the ass but if it stops hackings I am all for it



http://community.skype.com/t5/Secur...Authentication-When-is-it-coming/td-p/3425493

Post here also

 

[Sephiroth]

FireZ please add me on skype. its about this and i need to talk to you about it

 

[Visci]

Admirable idea, but I do not support this for three reasons.

1. Two factor security isn't even a requirement on sythe.org, why should it be for skype?
2. It requires all users to have a live:skype account, which many (myself included) do not. I do not want to start over.
32. It again promotes a false sense of security in regards to skype. Skype can and will still be hacked, even with two-factor authentication. The SAFEST way to ensure that you are trading the person you are speaking to is a PM on sythe.

If we're going the way of requiring increased security, I'd prefer to see further implementations of the sythechat.

 

[FireZ]

Admirable idea, but I do not support this for three reasons.

1. Two factor security isn't even a requirement on sythe.org, why should it be for skype?
2. It requires all users to have a live:skype account, which many (myself included) do not. I do not want to start over.
32. It again promotes a false sense of security in regards to skype. Skype can and will still be hacked, even with two-factor authentication. The SAFEST way to ensure that you are trading the person you are speaking to is a PM on sythe.

If we're going the way of requiring increased security, I'd prefer to see further implementations of the sythechat.

Cannot hack a 2 factor account without their device


But requiring across the board probably wont happen

 

[Sephiroth]

Admirable idea, but I do not support this for three reasons.

1. Two factor security isn't even a requirement on sythe.org, why should it be for skype?
2. It requires all users to have a live:skype account, which many (myself included) do not. I do not want to start over.
32. It again promotes a false sense of security in regards to skype. Skype can and will still be hacked, even with two-factor authentication. The SAFEST way to ensure that you are trading the person you are speaking to is a PM on sythe.

If we're going the way of requiring increased security, I'd prefer to see further implementations of the sythechat.

I would love to hear how you think a two-factored SKYPE can be hacked... because even IF you somehow managed to recover the Mic. Acct and reset the password, you would still HAVE to get the code to login all the way in (either by txt msg or the auth app.

Starting over isnt that hard. You let everyone know in your sig and by updating your regular contacts that you will only TRADE on your live: skype from now on. Otherwise, it would just be laziness.

The suggestion is to make it a requirement if you trade over Skype..... and it should be anyways for sythe traders to have a two step Sythe account, but thats another topic altogether.