Keep it clean
If you believe that a wish duplicates another one or is not meant for the category, use Options button above to report a duplicate or spam.
Add your wish
If there is an item you wish to have on GOG.com and it’s not yet on the wishlist, please add your wish
Provide token generation via TOTP for 2FA as an alternative to "Code per Email"
Added by
muekoeff Please add an option to enable 2-step-verification using TOTP tokens (instead of tokens mailed to the user) so that it's fully compatible with apps like Authy or Google Authenticator. This method is already provided by many other services like ChangeTip, Coinbase, Dropbox, GitHub, Google, etc.
--- --- ---
Activation flow when using this method may be:
1) User enables option in settings,
2) System displays QR-code containing the secret key,
-> User scans it and adds it to their generator app,
3) System asks user to enter token generated by app,
4) If matches: System activates setting
surarcham Agree. I feel TOTP safer and more convenient for 2FA.
mactrent My email delivery is not always timely. Dunno if it's on GOG's side, or my email provider, but it's a real pain to log in. I've bought a couple games elsewhere because I could sign in quickly AND securely there, after finding them here.
Fearghus8Destroyer "I don't like the idea of linking my account to a single device (in the event that said device used for authentication happens to fail)"
Usually you get 5-10 pre-generated backup codes during TOTP authentication configuration, in case of this situation. And some authenticator apps, such as Authy, even allov you to use more than one device so you could have an app on your phone, and on your PC as backup.
JakobFel As long as it's only an option, and doesn't replace the existing email-based authentication, I support this. I'm not a smartphone holder and I don't like the idea of linking my account to a single device (in the event that said device used for authentication happens to fail), so I go by email auth instead.
sebastiannielsen Agreed. Especially since many ISPs have, due to hacking, started blocking the email account access so it can only be reached from inside their network. TOTP is more secure, and also don't rely on accessibility to the Email account.
5 comments about this wish