Poloniex.com new security

[davida]

I often received a one time pin code through my email anytime i try to log in to my poloniex account and i must confirm my access using this codes but is this enough a security ? Can it not be broken easily?

[amacar2]

The ultimate security you can get is from 2FA using google authentication, email verification code can be breached if you are using weak password for your email or you are using same password that you have used in multiple other sites.

I have 2FA enabled in my poloniex and lots of other accounts after getting hacked few months ago.  

[blo8i]

I often received a one time pin code through my email anytime i try to log in to my poloniex account and i must confirm my access using this codes but is this enough a security ? Can it not be broken easily?

Well these days is more difficult to break a gmail account. Even you as owner if you login from a different country your account, it will be difficult to login if you are not having a phone atached or another recovery email, but as far as i saw this is only at gmail.

People are often saying weak password and shits. It doesn't matter. If you get a trojan with keylogger ...you are doomed.

Also the most secure thing is to have 2fa. The easiest way to activate it is to download google authentificator on your phone. Also this can be hacked too by professionals if they can find your api code on poloniex for example or other ways.

So my advice if you're handling is to activate 2fa too. Just mail verify is not enough

[CasinoBetGame]

I often received a one time pin code through my email anytime i try to log in to my poloniex account and i must confirm my access using this codes but is this enough a security ? Can it not be broken easily?

i think several exchanger use Pin code if you have not 2FA
if you have application 2FA, you can make 2FA youre poloniex account
i think is very safe if use 2FA

[titulng]

they run the new verification system, if you don't complete it, there is no $2000 quota again.

is this one of new security?

[hashshashin]

they run the new verification system, if you don't complete it, there is no $2000 quota again.

is this one of new security?

No, they have email verification for years. Anyways it is good to activate 2fa for a good security. Easy to handle, the only problem is you don't have a phone. But still you can add on your pc Google authentificator

[maeusi]

The new security codes of poloniex may make accounts safer, but I am upset, because I feel incapacitated by polo. On mobile, polo is not able to memorize my login just one hour. So I have to provide the code additional to my password at nearly each new page view. Polo should let users decide how they want to secure their account.

[Golftech]

they run the new verification system, if you don't complete it, there is no $2000 quota again.

is this one of new security?

No, they have email verification for years. Anyways it is good to activate 2fa for a good security. Easy to handle, the only problem is you don't have a phone. But still you can add on your pc Google authentificator

yeah its quite an additional security since they always encounter attacks this process is annoying though but for me its okay than become a victim
of the hacker and empty your wallet, 2fa is also another good option to be more secure just needed to do some process and it will delay your
log in and trades.

[alyssa85]

I often received a one time pin code through my email anytime i try to log in to my poloniex account and i must confirm my access using this codes but is this enough a security ? Can it not be broken easily?

As long as your email address has a completely different password to your Poloniex account, it's pretty safe.

The danger is if you have similar passwords and then BOTH your email account and Poloniex account is hacked.

Be Safe. Make sure all your passwords are completely different and are long and full strength.

[Iranus]

In order for your Poloniex account to be compromised with this security, the attacker would need to either:

-Compromise the passwords of both Poloniex and your email provider;
-Brute force your passwords using a computer (possible if you use a weak password);
-Infect your computer with malware such as a keylogger.

If you add 2fa, the attacker needs to do the same things as before, but also find and reach your physical location.

Unless there's a problem with 2fa, that's how you stay safe.  The majority of attackers will act just online.

I often received a one time pin code through my email anytime i try to log in to my poloniex account and i must confirm my access using this codes but is this enough a security ? Can it not be broken easily?

As long as your email address has a completely different password to your Poloniex account, it's pretty safe.

Malware from dodgy BTC sites is common when BTC is such an appealing thing to steal.  Be careful.

[kodtycoon]

I often received a one time pin code through my email anytime i try to log in to my poloniex account and i must confirm my access using this codes but is this enough a security ? Can it not be broken easily?

Yes i think all poloniex accounts are now added security and i think this is a good step from poloniex, even though the account does not activate 2FA but now every time we login we are required to put the code provided by poloniex to the email we use. I think this feature the same as 2FA and it will be nice and more secure.

[Catmony]

Yes i think all poloniex accounts are now added security and i think this is a good step from poloniex, even though the account does not activate 2FA but now every time we login we are required to put the code provided by poloniex to the email we use. I think this feature the same as 2FA and it will be nice and more secure.

When they have added this? They have made this mandatory or optional? I have 2FA enabled there so I think email verfication might not be needed at all.

Anyway I suggest all other to activate 2fa rather than just relying on this email verification.

[Patatas]

The ultimate security you can get is from 2FA using google authentication, email verification code can be breached if you are using weak password for your email or you are using same password that you have used in multiple other sites.

Correct.The hacker who established access to your account on poloniex mostly have access to your email too,2fa fails here.That's why the use of registered mobile phones with OTP are a more scured way of doing it.Google Auth is great but will fail if hacker has access to your computer anyway.

I often received a one time pin code through my email anytime i try to log in to my poloniex account and i must confirm my access using this codes but is this enough a security ? Can it not be broken easily?

I never received a pin in my email,just a link to verify if I'm the rightful owner.When did you get the update ?

[harizen]

I often received a one time pin code through my email anytime i try to log in to my poloniex account and i must confirm my access using this codes but is this enough a security ? Can it not be broken easily?

Security depends on your own hands.

Even without 2FA you can be safe but of Im not saying it's not recommended. I don't use 2FA authentication for Poloniex for years now and still not having a problem. This shows that the only thing we are prone to hacking is if Poloniex will turned into fraud or some malwares entered our PC system.

Im receiving too an EMAIL with PIN CODE and I don't have a problem to that.

[bounst]

they run the new verification system, if you don't complete it, there is no $2000 quota again.

is this one of new security?

No, they have email verification for years. Anyways it is good to activate 2fa for a good security. Easy to handle, the only problem is you don't have a phone. But still you can add on your pc Google authentificator

I never used poloniex, but I am curious that poloniex as a exchange had not enabled GAuth before???

[Rahar02]

I often received a one time pin code through my email anytime i try to log in to my poloniex account and i must confirm my access using this codes but is this enough a security ? Can it not be broken easily?

Security depends on your own hands.

Even without 2FA you can be safe but of Im not saying it's not recommended. I don't use 2FA authentication for Poloniex for years now and still not having a problem. This shows that the only thing we are prone to hacking is if Poloniex will turned into fraud or some malwares entered our PC system.

Im receiving too an EMAIL with PIN CODE and I don't have a problem to that.

And I've never seen about Poloniex security problems before, if your account get hack, then it should be his fault.
Yes, I'm more concern about Poloniex do such things about fraud but they won't do that, risk their reputation for few thousand dollars.
What you should aware is pishing sites which could ended as hack, and if malware get through your system, say goodbye to your money.

[BitHodler]

What you should aware is pishing sites which could ended as hack, and if malware get through your system, say goodbye to your money.

In most cases people are too lazy to activate extra security options when it comes to accessing important sites (which crypto exchanges are also part of).

There have been quite some examples of people experiencing multiple unauthorized log-ins, and it all comes down to people not having 2FA enabled.

It's insane how careless people are when it comes to the protection of their exchange accounts as unwanted account intruders might cash out, or randomly sell or buy with whatever you have in your account.

[Bitcoinsummoner]

For me the best to use is 2fa never had any problem or hack activity to my account or even they are trying to login they cant login because it will be ask first for autheticator and i use google authenticator..
That much more secured but you should always back up your authenticator once your app is corrupted or your computer crashed.
there are site that actually you can receive pin its also secured i think once you email is always unique in password..

[xypos]

I often received a one time pin code through my email anytime i try to log in to my poloniex account and i must confirm my access using this codes but is this enough a security ? Can it not be broken easily?

It really depends on if you're comfortable with this level of security or if you want to go further than just that. I'm not using poloniex that much now since they're having problems but it seems to be the case with everyone.

You still have to type your password which means that it's just an extra layer of protection on top of your password. It sure can be broken easily by compromising your email but that's extremely unlikely if you have a strong password and then hacker will still have to guess your hopefully unique polo password.

Not an issue honestly to worry about, it's just a new feature.

[Jherek]

I often received a one time pin code through my email anytime i try to log in to my poloniex account and i must confirm my access using this codes but is this enough a security ? Can it not be broken easily?

Yep same here, i had to enter a verification code that was sent to my mailbox before i could receive access to my account.

This is great for the security of people who don't have 2fa on their account previously but really makes no substantial difference to those who already have google authenticator 2fa enabled. Anyways it shouldn't affect anybody negatively apart from it being a hassle especially when you're on mobile or on a public computer.

Though please don't lose access to your email because if you do then you're totally screwed. You may not get a proper response from support for ages and you probably have some sort of money in there.