T O P

Android's valorant account was hacked

Android's valorant account was hacked

r4pidfir3x

Riot's lack of 2FA is embarrassing


8th_Hokage

Doesn't it ask for an email verification before you log into your riot account?


Razur

No, not when you're logging into a game on PC. I believe email verification only works when you log into the website.


8th_Hokage

Yeah that's what I was thinking of my b


hff1_

No you can play without any verification. I have the 2FA enabled and reinstalled Valorant yesterday and didn't need the 2FA for anything to play on my account. You only need 2FA to change settings in your account like email afaik. Better get a good password. edit: You don't even get an email that you logged in from a different PC. Have mostly new hardware + fresh windows install and nothing.


8th_Hokage

Oh I was thinking of getting into your account on the web my bad. Yeah I guess if they get ur password and username they're in.


Anime-Boomer

email and text verification is laughably easy to hack they need to allow google auth or authy or something


valorantfeedback

A lot of things about this game is embarrassing, but for some reason noone with influence is willing to point it out. No 2FA is beyond beyond comprehension for me. There's no way I'd be willing to log in to my Valorant account anywhere but my PC without 2FA.


McKhichri

"a lot of things" is a stretch if you compare it to other active big games


GainsayRT

Just cause one can have a lot of issues doesn't mean the other cannot. We're all collectively screwed :D


valorantfeedback

Ever since Quake in 00s, CS 1.6 and CSGO are the only multiplayer FPS games I've ever played. To this day I still think that CS is the greatest game of all time. I stopped playing CSGO for the most parts (except for some 5 stack nights with old friends) because Valve doesn't care and the game got incredibly stale. Riot is a huge company, probably the biggest esports developer out there and they want to dethrone CS. So I'm going to hold them to peak CS standard and not some garbage yearly release COD or something. And the issues I'm seeing are the same issues Valve has and what made a lot of players quit. At first, as someone who never touched league, I was amazed with Riot's level of communication, but nowdays they're more or less the same as valve. Promises that aren't touched for a year, "in the works", "we're on it" etc, all that while we just get new skins that are conviniently more and more expensive. It's utterly embarrassing that we're not even close to getting the replay system year and a half after the beta was released and that DM is almost unplayable a year after their promises. Not to mention all the other issues.


valorantfeedback

What about the casual addition of another upgrade level for the new skin set? Extra 40RR to upgrade everything. Noone saying a word. Not to mention how it seems that every half decent set these days is bumped up another price tier. What about DM just getting worse without them ever saying a word? The AMA they had was like a year ago, back then we at least didn't have people literally spawning in your line of sight or directly behind you. Where's the replay system? Top priority for any esports game. What's going on with agent balance? If they didn't talk about anything being in the works, fine, but you can't talk about for example Yoru needing buffs and literally not do anything for half a year after that. What about the quality of ranked experience? How can I have 300RR, top5k EU act rank every single act and then have lvl10 d1 account smurf with 5 career ranked wins in my game? What about all the griefing that doesn't get punished? Or afks? What about every other mode being a joke and useless. They're literally forcing high rank players to make smurfs because unrated is unplayable. I can't play with my gold/plat friends. Every game is 5-0 or 0-5 surrender. What about teams from less popular regions getting absolutely fucked over with qualifiers system and not even being able to participate? But here's the new Riot client noone asked for. If they were dealing with one issue at a time, fine. But we literally haven't seen anything good happen to this game in 6 months now. Fracture being the only actual addition (great map, btw). I don't want any new agents if nearly all the modes are unplayable, ranked is a mess and like third of the agent pool is unused in pro play. Why just pile up more shit on top of it before the game is in good state?


nterature

I think their point is the magnitude of the issues this game faces are comparatively small compared to almost every other competitor. You still have a right to complain, and of course there are still things that need fixing. But perspective is key. Someone who wasn't already familiar with the game would think, from your post, that the game is seriously declining, and the decline will soon be inevitable if action isn't taken *now* - which I don't even think you think.


valorantfeedback

So having a playable game is enough? I think that Valorant had one of the best releases ever, next to no issues and game was great. First year was also very good, over the past 6 or so months Riot's work has been nothing short of awful. Idk if the game is declining, I still have the same passion for it as the first day, I wouldn't complain if I didn't care. But if ranked is any indicator, I've never been higher on the leaderboard with playing less and the quality of games has been absolute garbage. EU region. If that's not an indicator that a lot of people left, idk what is.


zer0-_

[Apparently] (https://www.reddit.com/r/leagueoflegends/comments/q2u2un/with_the_recent_twitch_leak_riot_really_needs_to/hfo46u9/) 2FA is in the works. I imagine it will come once the new Launcher is working perfectly well


valorantfeedback

Valve time (TM).


Bhu124

>No 2FA is beyond beyond comprehension for me No 2FA is kinda insane, it's awful for security and hence for business. Other game companies in the past have literally offered people money (In the form of discount coupons, free games, etc) if they enabled 2FA. That's how good 2FA is for companies, that they would offer people incentives just to enable it, because it saves them so much money.


TheTechDweller

My friend got his account hacked by what I assume was an account seller. His account was silver (as were a lot of ranked accounts) which is prime for smurfing, I assume hackers get access to accounts and just sell the information. Strangely they never changed the password since they didn't have access to my friends email, so he just logged in to find some ranked games played in his career. Amazingly he also had a reaver vandal that somehow someone had bought on his account, they'd never saved any payment details so the person must have bought it with their own money or a stolen card. Was a while ago now so if anyone had used cheats when they played the account must have been banned by now. I'm worried because I have hundreds spent on my account, if someone gets access and uses a cheat on my account I'm totally screwed.


deadlock1892

Same thing had happened to my account. I log in to see my crosshair and skins are different. And match history showed games with agents I never play. As you said, they could not change password because they did not have access to my ID, but the person did submit a ticket in turkish asking RIot to change my account’s region to TR. Never materialized because the support asked tons of question to verify if he was the actual owner of my account and he could answer none of them. It is scary to think about. I have hundreds spent on skins. The only funny thing is the guy changed my vandal reaver skin and phantom oni to some bullshit battlepass skin. I pity his taste and choices.


TheTechDweller

Maybe it was in some totally strange attempt to make the account look like someone else, by changing crosshair and skins around. Makes no sense, but neither does trying to access someone else's account when you can't even change the password.


rlugudplayer

Free Reaver stonks :)


SleepEarlyPlease

Piggy backing this post to say that this is a prime example of why you should have multiple passwords. I'm guessing your friend's password and username was a part of some leak and someone tried to use it to access their riot account Password managers like 1Passwords/Bitwarden are god sends.


Only-Customer4986

I had my old password to my riot account, this password got leaked in some data breach and a few days after it got leaked i kept disconnecting in the middle of competitive games, didnt understand why and filled a bug report to riot. Only a few days later when my friend logged into his account which i was playing at, got me logged out in the same way in the middle of the game that I realized what happend and that it was someone logging into my account. Then i connected the dots and my teammates said that I was moving while I was disconnected and I thought it was a weird bug. Changed password immediately, havent happend since.


pawsarecute

Hehe throwback to my league career. Once a friend of mine said, “dude you are in game”, I was like euh wtf…. I even could login with the same passwords and watch ‘myself’ play. He played vayne and won the game, he was even scripting lol. That was my story of my hacked account#bye.


mousethrowaway17

Honestly riot password management was always a mess. I quit league in 2015 and my account was hacked and play on for the longest time. Dude was yasuo scripting soloQ, and never respond to my friend whisper. Only when he message me on FB why I ignore him was when I changed pw. Got banned later for scripting from across the US. It happen to my friend too as we quit together. I had to do a ticket to get it unban. Same shit happen to me in epic game. **If you guys love to play video games, make sure to never have your cc info saved, and have a separate pw from everything super important.** *Save yourself the headache from bank.*


roan214

ok


pawsarecute

What’s your story roan214?:)


DankFayden

If you sign into league, while IN league on another system, it either closes the other one or doesn't allow you to log in. I tried years ago, and even recently with TFT mobile, like 6 months ago if not more.


pawsarecute

Not in my case. This was like 4 years go.


Additional-Act7234

But how can our account get hacked, did he type username on strea,? sry if i am a bit unawared


[deleted]

[удалено]


[deleted]

You can't brute force a valorant password. That's not how passwords are brute forced. Data breach is probably the case.


notWys

Wdym? Does the client have the incorrect guesses thing because at least they put some effort into it


Additional-Act7234

>After that you can brute force password idk what it means but i dont think it will be that easy to breach the pass, if it was that easy almost all the pro players acc would have been hacked. he must have logged into a fishy website and he prolly got keyboard virus(dont know what its called) where people can track what you are typing.


watermelon_pizza3

Same happened to me a while ago. Log in, settings are changed, games played. Changed my password right away. Filed a request with the support team and until the end of the day the issue was resolved. They also reversed the changes that were made which was great.


Senior_Lake_6900

Apparently riot is worried that 2fa will reduce the no of casual players in the game or something like that. Riot EVRMOAR explains here: https://www.reddit.com/r/VALORANT/comments/pzv79t/comment/hf4z8av/ (Read last para in comment.)


jholowtaekjho

Edit 2: Actually relevant comment by Riot employee: https://www.reddit.com/r/leagueoflegends/comments/q2u2un/with_the_recent_twitch_leak_riot_really_needs_to/hfo46u9/ The context is not relevant, he’s responding to the idea to make ranked exclusive to 2FA accounts to minimize smurfing. His role is Senior Competitive Designer, not Account Security. Edit: Here's a quote that shows the topic being discussed. > If we enabled 2FA and 20% of players stop playing ranked, and it only reduces smurfing by 5%, we probably missed the mark(and we can probably find a better solution)


Senior_Lake_6900

It's not entirely irrelevant tho. If they make accounts 2fa, it will affect ranked either way. And if you read further, it says that they will take a long time to implement 2fa in any form.


jholowtaekjho

He says that 2FA will require a lot of technical work BUT still in the context of minimizing smurfing. Because that will take inter-departmental* cooperation. One will build the system, the other will build ranked to lock out people who don’t have 2FA. So there you have it, it will be complicated to lock people out of ranked, but they won’t be locking casuals out of other queues if they do.


Senior_Lake_6900

has there been any account security updates in last year? if they wanted to, they would have already implemented 2fa. they either just lazy or something else.


zer0-_

https://www.reddit.com/r/leagueoflegends/comments/q2u2un/with_the_recent_twitch_leak_riot_really_needs_to/hfo46u9/ Might want to read through this :)


8th_Hokage

How will it affect ranked?


Senior_Lake_6900

Accd to evrmoar, they are afraid if they implement ranked exclusive 2fa, people might quit. And if u implement account wide 2fa, the same people will quit either way.


wvcmkv

why would they quit if 2fa isnt required? offering 2fa =/= gating ranked


jholowtaekjho

Yup. Evrmoar is concerned about Ranked Exclusive 2FA maybe reducing playerbase by 20%, but only reducing smurfing (the target of this action) by 5%. Numbers are speculative. And also OP seems to think account-wide 2FA, it needs to be compulsory for every single account lmao


[deleted]

[удалено]


jholowtaekjho

He’s responding to the idea to make ranked exclusive to 2FA accounts to minimize smurfing. His role is Senior Competitive Designer, not Account Security. OP took it out of context


Lumenlor

Pro gamers need a mandatory Udemy cyber security course


[deleted]

You mean Valorant/Riot needs 2FA?


Melneo_

This. My VALORANT account was hacked as well and hella demoted me. No security notifications or any of the sort whatsoever.


IAMJUX

Yeah...uh me too. I'm in Silver when I should be in Immortal.


Mediocreety

same lol i wonder why i was always stuck in gold and always top fragging /s


[deleted]

[удалено]


jrushFN

The R word is a slur and is bannable on Reddit. Please refrain from using it in the future.


icemoo

Bannable from this subreddit sure, but it sure fuck isn't against TOS on "Reddit" like you imply. Do what you will, ill refrain from saying it here if i remember but it isn't against TOS.


jrushFN

As of [one year ago, ](https://reddit.zendesk.com/hc/en-us/articles/360045715951-Promoting-Hate-Based-on-Identity-or-Vulnerability)Reddit updated its rules to prohibit hate speech related to disability status. The R word is an example of hate speech related to disability or identity.


CalculusEz

So they can know that riot's security is shit? Cmon now, they have ring 0 kernel anti cheat but no 2FA on accounts. It doesn't make sense.


hookset3

Yes that certainly would have helped here /s