Which of the two will you choose as a gambler?

[ethereumhunter]

I am okay with number one because I don't understand too much with the number 2. Besides that, I think the number one will be more familiar to me as I see that is applied to many gambling websites or another website. I will use a different password for every website. That is what I always did with all of my accounts.

[20kevin20]

The second one "turns me off" - how secure is that option really? Because using a clipboard to copy-paste a code can easily be targetted by some malicious software and the code does not expire, which makes 2FA much safer imo.

AFAIK, you can generate 2FA through Ledger too. If privacy is your concern, you can create an isolated email address strictly to use it for a website authentication. If you create one through ProtonMail, you can use it even on Tor (protonirockerxow.onion). I'd rather have a code that expires every X seconds than have a code that never expires which anyone could use at any time to do damage to my accounts.

[BitcoinTurk]

Although the first option is easier to use, it is not a very safe option. My preference will be the second option because I care about security and it is important to remain anonymous. The second option is absolutely safe, anonymous and less risk-free. Also, it is entirely up to the user to decide whether or not to keep your private code generated for your account in the memory of a single computer, even though it has been mentioned as a disadvantage. It would definitely be wrong to state that there is such a disadvantage if it is stored in at least two or more areas. To briefly comment on other disadvantages, unfortunately it is a risky choice as it will not be possible to access that code again as a result of the slightest copy or change error, but as I mentioned in the previous sentence, you can protect your code on several different devices or locations. On the other hand, unfortunately, there is nothing that can be done if the code is stolen. It should not be forgotten that no method or security measure can be completely flawless.

[Maslate]

I choose the more secured one, we are gambling money here so it's just right to give the best security of your account. Though the option one is quite simple, but when it comes to money I'd rather value security over convenient, and with that said, I confirm that all my gambling site accounts are secured with 2FA.

[finaleshot2016]

I prefer email-based authentication.

Easy and I guess it's hard to hack an email full of 2FA. Keys are very vulnerable because much of the time they were stored on the PC, and obviously, PC are naturally also vulnerable and can easily be baited in phishing and some sort of hi-jacking.

Even if you have Windows Defenders or even multiple AVs, there are still undetected malware roaming around that may compromise or mimic those keys.

[mindrust]

Email based authentication is fine.

It worked for me without any failures till now and it is because my emails are safe as well. Don't make things unnecessarily complicated it not good for you it is not good for the player.

If email-based auth wasn't good enough security-wise, nobody would be using it by now.

[bitbunnny]

Safety and security comes first for me so second option is what I would choose. I think that protection of your privacy and data is very important but not enough users are aware of that. They often choose easier and nore user friendly options and these are always risky  and when consequences appear it's really hard to get everything back. So my advice is always to think twice when your security is involved.

[bittraffic]

Security in the 2nd option is best but keeping the code is going to be really hard especially because hard drive can be corrupted. I have several USB to keep my privatekeys and codes, a very redundant job to keep. It keeps safer but also dangerous if someone finds my USBs and knew what those files are. I prefer the 2nd option.

Option 1 can be safe for you if you do have an Alzheimers, you can just retrieve your passwords thru email but we all know the dangers when it comes to hacking.

[smyslov]

I'm ok with email-based authentication, in fact, all my authentication are done on email, my email is phone authenticated so access for hackers are very hard I also added additional features for my email account if I am going to use key-based authentication I am also going to use email to keep it.

[Renampun]

number 2 is my choice...
Authenticator email is very complicated for me, I don't always open emails, and also not always in front of a laptop, so number 1 is uncomfortable for me.

[mu_enrico]

I'm comfortable with email and 2fa. I think key-based stuff only suitable for crypto wallet apps, or if you want to get serious in the gambling business. As for anonymity, you can use Protonmail if you trust the service.

They said:

No personal information is required to create your secure email account. By default, we do not keep any IP logs which can be linked to your anonymous email account. Your privacy comes first.

The problem for key-stuff is you need to write the key, which is troublesome for casual gamblers.

[mersal]

Key based authentication is for someone who gambles too often with huge money like thousand dollars or more for each bets so they will be looking for something highly secured and email based is some someone who gambles with very little amount and not too often and they will not leave much balance on the gambling site's wallet.

[onrise]

I am okay with number one because I don't understand too much with the number 2. Besides that, I think the number one will be more familiar to me as I see that is applied to many gambling websites or another website. I will use a different password for every website. That is what I always did with all of my accounts.

I will also go with Email as it is more convenient to me and also only thing you should have a string password set for each thing which will make things for difficult too for anybody. Depends on everyone choice what each one would prefer to use as for all safety is priority and which they feel more suitable would consider it.

[aioc]

Email based authentication is fine.

It worked for me without any failures till now and it is because my emails are safe as well. Don't make things unnecessarily complicated it not good for you it is not good for the player.

If email-based auth wasn't good enough security-wise, nobody would be using it by now.

I agree you can secure your wallet properly and easily, with key authentication you have to place it in something that will not get lost, could be on a cloud or USB but I find email authentication far and the best way to authenticate.

[kawetsriyanto]

I prefer using email based authentication (option 1), it is easy to do as a common way and I think 2FA make it secure enough. Option 2 is too complicated for me. Moreover, it is too risky if we lose code. This is a very bad disadvantage of using keys based authentication, means we can lose our account any time just by making a single mistake.

[dothebeats]

I'm kind of a goldfish when it comes to memory retention, but so far all of my accounts which require special keys for activation and whatnot are still intact with their respective keys being stored in a tablet which I don't use for online stuff. It's a mess whenever I have to login and type the string character by character but if its for the utmost security of my account then I'm fine with the extra steps.

I even had an experiment wherein I created multiple emails with the same passwords, registering all of them to some of the most frequented sites when it comes to gaming (Steam, Epic Games, EA, etc). I was never surprised that after a couple of weeks, I have already received alerts that the accounts I registered were asking for an authentication to my email. Of the three of the test accounts, all of them were compromised--how and why, I don't know.

Email is easily exploited and prone to exploits and hacks. 2FA seem to have defeated these hackers in some way, but even those themselves are vulnerable to exploits and bypass, which is quite scary too.

[Rengga Jati]

-snip-

According to your explanation, my characteristic fits with email-based authentication because I don't play gamble every day and just in a very few amount of money. No, I never leave a big amount of money on the gambling site's wallet, I know it is too risky. So, I will go with option 1 on OP and it is exactly what I did till now. I think it is safe, although less secure than option 2.  

[TimeTeller]

Key based authentication is for someone who gambles too often with huge money like thousand dollars or more for each bets so they will be looking for something highly secured and email based is some someone who gambles with very little amount and not too often and they will not leave much balance on the gambling site's wallet.

It is actually true, for small timers, email authentication is more than enough.
As they are not worried even if their account is hacked as either their account have small amount or they always transfer their coins to a more secured wallet.
But for those who have significant amount on their account, it is better to have another level of security.
On my end, in some sites I have email authentication while there are some that I have 2FA on.

[ralle14]

The private key option seems better but I haven't tried it as most casinos usually have 2fa. Both have it's good and bad sides but it'll depend on my gambling activities since I play on several sites. If I always gamble in their casino every day and they have both authentication available i'd pick the key option over the email but if i'm only playing every now and then email is the way to go imo.

I don't fully understand the option 2 which is the Keys Based Authentication.. As a gambler, I just follow the usual procedure when registering into a gambling site, normally, I make an account, put my email into it and then hit the verification link once I receive it..

The key based auth is basically having an additional layer of password in a form of a private key somewhat similar to OTP but it's the only code you have that doesn't expire.

[LogitechMouse]

I have an account in an online website where there is a 2FA and there is nothing wrong that I've experienced with it so I will choose keys authentication for this.

I think its obvious already that 2FA is stronger and harder to hack compare to an email authentication. The only disadvantage that I see in 2FA authy is that when your phone or the device where you saved your account is lost, broken or stolen, it will be hard for the owner to retrieve it but that can be preventable if you just handle your device with care and secure it all the time.

With Email authy, it is easier to access but it is easier to hack too. I still remember days ago when there is somebody who got access on my main email. Luckily there is a notification that says if I'm the one who is opening my account and I didn't opened my account in other devices so I clicked "NO" and changed the password immediately. That is how easy email can be hacked so I don't like this although it is easier to access and you can still access it even you are using another device.