More Security // Vulnerability of 2FA

Recently I got hacked from my main account, the person managed to get my account TOKEN and have access to everything.
And I couldn't have it back because they enabled the 2FA with their phone number, so... there's nothing I can do.

But they can't change things like: My username, my tag, and stuff like that. Because they don't have my PASSWORD.

So, my suggestion is: Please require the account password to put the two-factor authentication.
Some of my friends passed through this awful situation, and that would prevent to happen again.

They have acess to some really personal stuff of mine, and that makes me terrified.

Cheers, Bam.

Comments