Account Breach incident

For the VPN thing, what's stopping them from creating a new account with a different email/fake birthday/whatever and starting again? Sorry, this has me really paranoid (even though I probably wouldn't be affected because I never really go completely inactive?) To the people saying 2FA should be connected to phones, what about people like myself who don't have phones? Fine if it's optional but what if it's not? I understand the concern but to me this all seems a little excessive for a clicking game site. And yes I know real money is traded sometimes (and I hope RMT doesn't get disallowed because I'm thinking I may be forced to sell some of my melans soon haha). idk I guess I'm just confused and kinda overwhelmed over why someone would even get the idea to do something so evil on a frikkin' pokemon game :/

one problem: you said you made/were going to make the VIP list so that you couldn’t see who’s online correct? if you look at the farm (tab 1) and look at the vip list, it still tells you how long someone’s been offline (or at least for me it does)

If they are offline for more than 7 days, it just says >7 days, instead of <Insert ludacris amount of time here>.

Ye True not everyone has a phone, plus when you get a new phone would have to switch the 2FA over to that phone. I've done it on another game it was a hassle.

(i know not much has been said about what is/isn't being implemented but i wanted to share my thoughts) I agree that 2FA should be optional if implemented - for my work we need 2FA to log in to get access whilst working from home and the main thing they push is an app. one of my colleagues does not have a smart phone but thankfully they allow a text code to input. But what if someone doesn't have a mobile? Overall i think, similar to if someone chooses to not have a secure password, they should be able to choose whether to have the extra help. Also i am happy the VIP list has been slightly reverted to show recent online status - i often use the list to see if someone i have messaged is online or not to see if they are ignoring me or just not on.

There are options to use 2FA on your computer. Authy and Winauth are two options that allow you to use a desktop app instead of a mobile app. It's almost certianly going to be optional considering I can't even name one game that has mandatory 2FA.

I just hope switching phone or some such doesn't become a huge problem. Given that some people change ohones every 2/3 years.

Some people change phones as soon as a new one comes out (every few months)

Considering it's tied to apps that typically need to be downloaded, and you can always use your super secret emergency code to get in if nothing else, I don't see it becoming a proble,