Authentication Tokens

[Lazzadorabcd]

Does anyone know a lot about this stuff?

I was trying to read into it and it seems pretty good. I dont really understand how it would work with my 4 accounts on one PC. After having issues with my accounts I would be interested in additional measures if they are actually effective. I guess blizzard is sold out atm so a lot of people like these.

Its also not totally clear to me about how it stops key loggers.


Blizzard didnt have a very good description of it on their website.

[Stabface]

The Blizzard Authenticator hardware token implements a two-factor authentication scheme -- possibly RSA's SecurID, but I'm not certain which one.
In addition to your account name and password, at login you will need to enter the six-digit numerical code generated by the device. The hardware token has an internal clock and a passkey that's used in a one way hashing algorithm -- since the server also knows the time and passkey it generates the code as well at login and verifies the two. Generally the key is valid for a window of time, 30 or 60 seconds is commonly used. You can generate a new code at any time just by pushing the button on the token.
A single authenticator can be associated with multiple accounts, so if you have 4 accounts logging in at the same time, you'd enter the same 6 digit code at login for each of them. If they log in at different times you'll need to generate a new code at each login (by simply pushing the button on the token).

[twobztwop]

I wanted to get one, but they have been sold out for the last month on Blizzard's online store.

[Bovidae]

It's worth the money. Apparently everyone else thinks so too, because they are constantly sold out.

[Stabface]

They have been sold out since just a few days after they were released. I check almost every day to see if they are in stock or not.

Direct link to the Authenticator, btw: http://www.blizzard.com/store/details.xml?id=1100000182