Password Reset For Dormant Accounts

[Cordovan]

As part of our effort to keep people's game accounts secure we have reset the passwords for all game accounts that have not been logged into in more than two years. Your game account and all of its data remains intact! In order to log in,you will need to reset your password through the Forgot My Password reset procedure. To further help protect your account, we also recommend that you regularly update your password details, and never share your password with anyone. If you need further assistance, please contact Account Support through help.standingstonegames.com.

[Lauf]

Out of sheer curiosity, how is me not logging into my account for two years make my password less effective?

[Cordovan]

Out of sheer curiosity, how is me not logging into my account for two years make my password less effective?

The security issue is not about how often you log in, but rather about people leaving abandoned Internet accounts with old, no-longer-used passwords that eventually get out into the hackersphere and are then used by malicious actors to try to steal people's various accounts. So, the old old password sitting on your 10-year-old dead social media account that got a data breach in say 2012 is cracked when someone grabs that old old password and starts seeing what they can do with it. At least after today those passwords cannot be used to compromise these dormant game accounts.

[Lauf]

Thank you for the response, been around this game for many years now, on and off, and was wondering if I should be concerned about my account's password no longer being secure because of any off time.

[Mindos]

Will this affect accounts as they age out? If I have an account that's been unused for 1.5 years, will it automatically reset the password in .5 years? Or is this just this once?

[Seph1roth5]

I say if you haven't logged in in 2 years just delete their account lol. I took a break for a few years but had my friends log in and keep me up a bit.

It'll help with lag?

[rsking]

I say if you haven't logged in in 2 years just delete their account lol. I took a break for a few years but had my friends log in and keep me up a bit.

It'll help with lag?

issue with that is how many of those accounts are founder accounts let alone alpha and closed/open beta accounts. if I was unable to play due to say military reasons (had a friend who was being deployed and didn't hear a peep for about 6 years) and my account got deleted i'd be ****ed.

[rabidfox]

I say if you haven't logged in in 2 years just delete their account lol. I took a break for a few years but had my friends log in and keep me up a bit.

It'll help with lag?

Pretty sure there are TOS rules about not having friends log you in so that's not an actual option for maintaining an active account.

issue with that is how many of those accounts are founder accounts let alone alpha and closed/open beta accounts. if I was unable to play due to say military reasons (had a friend who was being deployed and didn't hear a peep for about 6 years) and my account got deleted i'd be ****ed.

Exactly, never delete old accounts; people take long breaks for a variety of reasons, but it's easy to lose them as customers forever the moment an account is nuked from orbit. I came back to my old account after many years away cause I wanted a break from LOTRO; if it hadn't been around I like would've just started some other game fresh.

[Annex]

I do not understand some things.

Are the forums and in game passwords different again?

If different, is this about game passwords and where do I go to change my game password?

Just a few weeks ago, players in either the DDO or LOTRO Forums states that the mechanism to change passwords is not secure. That discussion scared me away from even trying to change my password. Is the place for changing a password secure or not secure?

Is the procedure the same for Lord of the Rings Online accounts?

What happens if I lost access to the email account associated with a game account? Under your new rules, I cannot access them anymore? Are they gone forever?

This scares the heck out of me.

Edit: All my DDO game accounts remain accessible but if I am to change game passwords, I want to go to the right place. It appears I lost some LOTRO accounts. Will this be standard policy going forward, wiping passwords every so often? Is this a lag thing? Should I tell Customer Service to kill some old LOTRO accounts to help with lag over there?

[Erofen]

What happens if I lost access to the email account associated with a game account? Under your new rules, I cannot access them anymore? Are they gone forever?

This scares the heck out of me.

Yah, this is a terrible move.

[rabidfox]

Edit: All my DDO game accounts remain accessible but if I am to change game passwords, I want to go to the right place. It appears I lost some LOTRO accounts. Will this be standard policy going forward, wiping passwords every so often? Is this a lag thing? Should I tell Customer Service to kill some old LOTRO accounts to help with lag over there?

It's a security thing. Some people use the same password across multiple games/stuff. So lets say XYZ game gets hacked and the passwords stolen and the person used the same password for DDO then the DDO account is vulnerable to being used by the hackers. By having inactive accounts' passwords reset (and harder initial log where you have to re-setup a fresh password via recovery) when returning after 2+ years away, it means those players are more likely to return to their account still being as they left it with less risk of hackers having sold off/abused/etc. their account. If you use a different random password for every game/account you have then this password reset is a minor annoyance but for those who might have used the same password in multiple locations then this helps boost the security of their DDO account while away from the game for long periods.

[Annex]

It's a security thing. Some people use the same password across multiple games/stuff. So lets say XYZ game gets hacked and the passwords stolen and the person used the same password for DDO then the DDO account is vulnerable to being used by the hackers. By having inactive accounts' passwords reset (and harder initial log where you have to re-setup a fresh password via recovery) when returning after 2+ years away, it means those players are more likely to return to their account still being as they left it with less risk of hackers having sold off/abused/etc. their account. If you use a different random password for every game/account you have then this password reset is a minor annoyance but for those who might have used the same password in multiple locations then this helps boost the security of their DDO account while away from the game for long periods.

Thanks, rabidfox. I use a different, completely random password for each account, everywhere. My dad drummed that into me form an early age. However, I know I have not changed my DDO passwords for a while and I should link them to current email addresses. Earlier this year, my dad had me switch to a new, more secure email provider. I am fine with this change but I want to make sure I update everything correctly.

[mistress_minx]

As part of our effort to keep people's game accounts secure we have reset the passwords for all game accounts that have not been logged into in more than two years. Your game account and all of its data remains intact! In order to log in,you will need to reset your password through the Forgot My Password reset procedure. To further help protect your account, we also recommend that you regularly update your password details, and never share your password with anyone. If you need further assistance, please contact Account Support through help.standingstonegames.com.

I was in contact with support for a year and a half trying to recover an account. I was able to correctly give the account holder name and characters, but cant recall the username, email, or password. She said I was close on a cpl email guesses, but I believe I mistyped the email addy when creating the alt account. I gave up a year ago. How can I gain access please ?

[Fefnir_2011]

As part of our effort to keep people's game accounts secure we have reset the passwords for all game accounts that have not been logged into in more than two years. Your game account and all of its data remains intact! In order to log in,you will need to reset your password through the Forgot My Password reset procedure. To further help protect your account, we also recommend that you regularly update your password details, and never share your password with anyone. If you need further assistance, please contact Account Support through help.standingstonegames.com.

Thanks for the helpful explanation, Cordovan! Out of mild curiosity, I have an old secondary account associated with an email address I no longer have access to (I started playing DDO so long ago I used a college email). Should I write that account off, or is that something I could sort out with Account Support? I do have access to my main account, which is also curiously associated with the same email still.

[Cordovan]

Thanks for the helpful explanation, Cordovan! Out of mild curiosity, I have an old secondary account associated with an email address I no longer have access to (I started playing DDO so long ago I used a college email). Should I write that account off, or is that something I could sort out with Account Support? I do have access to my main account, which is also curiously associated with the same email still.

Account Support can and does frequently help people re-establish the credentials to their old game account. The process can take a while, though, especially if someone no longer remembers their old user name, password, email, etc. But yes, you can do it through help.standingstonegames.com.

[Big_Bad_Wolf]

They aren't worried about individuals' non related social media accounts left ripe for hackers. Naughty players fault... Blame the silly players.

It the huge Turbine breach of accounts data the bad-actors already have. Magnitudes bigger than the active accounts.

Yes this measure stops them in their tracks but to suggest it's something else entirely is morally corrupt or Cord is a bigger fool than we could imagine for dishing this tripe. Utter spin.

[Vehementi]

Pretty sure there are TOS rules about not having friends log you in so that's not an actual option for maintaining an active account.


Exactly, never delete old accounts; people take long breaks for a variety of reasons, but it's easy to lose them as customers forever the moment an account is nuked from orbit. I came back to my old account after many years away cause I wanted a break from LOTRO; if it hadn't been around I like would've just started some other game fresh.

Deleting accounts is why I can't bring myself to invest time into Final Fantasy MMOs. They deleted my FFXI account while I was in college and couldn't afford a sub.

[Dark_Helmet]

Out of sheer curiosity, how is me not logging into my account for two years make my password less effective?

Besides password reuse from other sites, there were (allegedly) hacks during the Turbine days (e.g. 2013 to name a well known one).

[fork_aka_spoon]

I say if you haven't logged in in 2 years just delete their account lol. I took a break for a few years but had my friends log in and keep me up a bit.

It'll help with lag?

I mean, I came back after an 8 year break...2 years isn't a very long break from a game, have had longer from multiple games

[mistress_minx]

Account Support can and does frequently help people re-establish the credentials to their old game account. The process can take a while, though, especially if someone no longer remembers their old user name, password, email, etc. But yes, you can do it through help.standingstonegames.com.

I was going back and forth via email for over a year and a half trying to get back an account. She told me I got close to guessing the email used, but if I couldn't spell it exactly than she couldn't help me. So I should try again ?