Doubt about the current updated safety of 2fa as someone who had risked to lose their acc before(and did not receive help from support)

&#x200B;

warning: slightly long and complex, please do not downvote this to oblivion in case, I just really wish for an answer

so I am fine at the moment, I have the account tied to a locked down mail by a local 2fa measure, and that is ok, but long story short, I wished to eventually start streaming again, and wished to download genshin on my new computer.

however, I have encountered a rather stressful situation before, where I had downloaded a malware through an app, which was probably a keylogger, or remote access kind of thing, and someone had entered my google account and facebook account, which at the time was tied to my genshin account, and locked me out.

it was around the first or second wave of russian hackers, where I had not, in fact, shared my password and would monitor who accessed, until it was too late, so to speak.

but basically, I physically fought off the hacker or their client who had bought it by spam logging into the account while they were in, and messaged them through a friend's account telling them to unlink their stuff because it was a stolen one i still had access to throgh the unlinkable psn.

I had emailed support through their long forms, but probably got something wrong as a launch player who had not kept track of all things, not even accounting for the possibility anyway, but they never elaborated so, long story short, even if it is an acc I probably spent like 2k on, they never cared to assist further. so that is to say, in case, support is not an option.

they (hacker or buyer, who knows at this point) eventually gave up, and thankfully did, and through there I was able to restore access and kept the game on mobile only since then.

now, my biggest question is, they detected the unusual activity, and last time I checked, it seems like my acc is sort of locked down, it is impossible to even opt to change the mail. like a message pops up saying to "retry later" indefinitely

so, given this, paired with that mail tied to my local 2fa, do you think I can still somewhat safely put it back on my new pc, which also has a strong antivirus on this time, or should I just not risk it and never put it back on there?

I still occasionally navigate streaming websites, and stuff. I am careful about not clicking ads and all, but that is to say, I do not use the pc just for like word and youtube, or something... while everything else I have is locked down in its own way, genshin last time I checked was...a bit unprotected, in this sense, since I remember people could just log in with their socials and it'd be done...

for reference, I deleted facebook and other socials since then, and the mail and google acc I use are not on that pc...

do you think I can try? or just resign myself to having to link up the playstation with a double setup every time, and waste much more energy?

Voir le contenu lié

Commentaires

SoC1752026-01-22 12:58

I don't understand why in this day and age they're not giving the option to add an authentificator.

Those who don't care wouldn't have to activate it, those who care would feel better about their account

_TrenZlyte_2026-01-22 12:59

Just wipe your PC? Windows defender is strong enough to detect for the run of the mill viruses but there's no reason not to just completely wipe everything and be 100% safe.

Also you'd have a much better time with support nowadays, they have less shit going on in general so getting them to reset some of the 2fa and connecting it to new stuff would probably be 10x easier

JustARedditPasserby2026-01-22 13:10

[New pc]

The thing is, I said I do not trust support because they have denied me before due to "unsatisfactory info" when they had all payments dating back a year, and multiple screenshots and videos spanning across time, and even youtube videos. I do nit trust them to intervene if something happens, it is a miracle I could manage it myself due to the psn being the safest thing

_TrenZlyte_2026-01-22 14:09

I lost my account during the data breach, took ages but all i sent was like 2 payments for welkin and a single youtube vid of me playing the game with the uid so it's surprising you get knocked back. Linking your account to gmail is the safest thing to do now anyway. i'll say also if by some miracle you somehow contract a virus that bypasses windows defender the chance that that 1 virus is also used to log into genshin is like 1 in a million unless you're downloading from sketchy genshin mod sites for skins and shit.

Message support now and ask them to get rid of 2fa for facebook twitter and whatever else you don't use and just link your email, if you for some reason don't have the credentials for the old email then you'll have to go about resetting it all through them.

JustARedditPasserby2026-01-22 14:13

I was not using mods. And yet, it still happened, and they never elaborated on what was unsatisfactory or why, just said no and said the same the time after, because I had tried sending 2 forms at the time. Now everything is disconnected, but I am concerned about it happening again. I have since then flat out deleted every acc compromised

_TrenZlyte_2026-01-22 14:17

Just log in on PC and in user center connect the email, since i lost my account in the data breach (nothing on my end) all i've had connected is my phone number and gmail for 4-5years never had an issue.

JustARedditPasserby2026-01-22 14:19

It seems to be locked after the hackers matter. I cannot change stuff there. Even if I for now have the master access. The question I wanted amswered was if now it asked at least for the mail confirmation before changing it

_TrenZlyte_2026-01-22 14:32

I'm sorry it's hard to understand what you're askin, you say its locked and can't be changed but you're talking about email confirmation about it changing?

JustARedditPasserby2026-01-22 14:52

I wanted to know on average if they added checks before anyone can try inputting a new password or social media account anyway, accounting for all chances

_TrenZlyte_2026-01-22 17:02

everything requires a code which is sent to the email if there is one connected, it's imperetive that you have one on the account and have access to it readily.

Confident_Yoghurt5442026-01-22 13:19

I think that compromised pc need to be nuked and reinstalled. Assume that all your account details are compromised, so local network and close friends are affected, so secure yourself first before investigating further and know how big of an impact it is. change password everywhere and place 2FA if possible with password manager.

further things to do is to purge your trusted device in hoyo's account management and make sure your email is secured and it has not been compromised.

if the email has not been changed by the hacker, you could just change password. But if it has, maybe you are out of luck as they may have spent items in game and support is usually not useful to those who have already been compromised. Hoyo's account security is somewhat not as secure as I would have liked.

tbh i think you just have an unlucky experience. If you want to be safe, install adblockers, make sure windows defender is active, go to streaming websites that are listed in "fmhy" and the most important thing is to have common sense if a website seems very sketchy.

JustARedditPasserby2026-01-22 13:20

[Pc was changed and google acc was deleted, yes, I already did this long agp, I had to check in with the bank, everything. They had only touched the means necessary to get genshin, my least protected thing. Hacker could do nothing because I basically caught it the same day, and kept monitored, and made whoever had it ragequit and had time to do nothing]

But that is not the point, I already took measures, I want to know if things got better or it can happen again

Kamimikoo2026-01-22 13:32

things like these can always happen again, even on your phone
you need to be careful on the internet and about what you click on and download, a keylogger just doesnt come from nowhere and as i said it can also happen to you phone.
The problem is the user not everything else

JustARedditPasserby2026-01-22 13:32

Yeah, I know the user's a big component...but has safety improved in any way? Or stayed the same?

Kamimikoo2026-01-22 13:42

what more in safety do you want? there is 2fa, you can link your account to many things too. As i said in the other post, if you click on sus links and download keyloggers thats not a problem with the security but with the things you click on. I play this game since 1.0 and never had i any problems with it. If you dont feel like your account is safe enough then give mihoyo feedback on what you want, we other users cant tell you if you click on a sus link again or not.

JustARedditPasserby2026-01-22 13:43

There is a mail check if somebody tried to change the password?

Because the mail is safe. Nowhere online, and resets every 30s

SubstantialYak65722026-01-22 13:46

The first line of security has to be your own common sense. I have been online since 1997, have over 300 online accounts and have never lost one of them... and I don't use a 2fa system. Your account security is your responsibility and if you fail to be responsible, then it comes with consequences that you have to accept support can only do so much with.

If you don't provide accurate information to prove owership of the account, they have to reject the claim because if they didn't, it opens the door for anyone to be able to claim an account with only partial information. They're not going to give you information because if you are the scammer, then they would just be helping the scammer get access easier. Accounts are locked until either party can prove conclusively and unquestionably that they are the rightful owner... that is how proper security works, 100% proof or no access.

Sadly, as the security hole was one that you opened by allowing your PC to get compromised, then you have to be the one to jump through hoops to continue. You can claim to "not trust support" but you installed the malware, not support.