Security Awareness Month 2013

http://maplestory.nexon.net/news/news/current/00Fj1/

Security Awareness Month 2013

As part of Year of the Snake, we are dedicating the month of February to security awareness. The Internet is an integral part of our lives, and as we create more and more accounts and store our personal information on servers all over the world, its important to consider how we can keep that information private.

Nexon continuously strives to improve account security so you can worry less about the details and more about experiencing everything MapleStory has to offer, but the first and most important step in account security starts with you. You can help improve the security of your account by following some simple steps:

1. Create a complicated but memorable password.

A password is the key to your account, and it shouldnt be easy for a person or a computer to guess. Dont rely on words from the dictionary, personal information like birthdays, addresses, etc., or common sequences like 123456789 or 000000000. A long password with a mixture of numbers, letters, and special characters is ideal.

2. Update your password and Personal Identification Code (PIC) frequently.

The general rule of thumb is to change your password every three months. Never reuse or share a password across multiple accounts or the compromise of one account could lead to another. The PIC is the second line of defense against unauthorized logins, and it should be treated like a second password.

3. Do not share your account information with anybody.

The easiest way to get your account stolen is to share your account information. Whether its with a friend or a complete stranger, sharing account information can lead to account theft. No matter how much you trust someone, you should never share your account information.

4. Game Masters (GMs) will never ask for your personal information, including your password and PIC.

A GM will never threaten you or ask for your personal information. Malicious users sometimes impersonate GMs in order to try and steal an account. If you ever encounter a GM that asks for your personal information or threatens you in any way, block him or her immediately.

5. Know our official domain: Nexon.net.

MapleStorys official website is maplestory.nexon.net on the Nexon.net domain. Consider all websites outside of the Nexon.net domain unofficial. If you see a website that promises NX, items, mesos, or Maple Points, its most likely a scam. If you come across something that sounds too good to be true, it probably is!

MapleStory has a list of official affiliate websites here . Please keep these guidelines in mind when creating accounts on affiliated websites.

Dont rely on words from the dictionary

The pineapple? lol nexon..

 Spoiler

They forgot one:

6. Getting yourself banned will prevent others from logging on your account.

Absolutely no fear of having your account stolen, ever! Some of our GMs are already applying this incredible idea we've came up with. Check back often to see if you're one of the lucky players we've selected that get to benefit from this impenetrable wall of defense! Comes in two possible protection plans: a 30-day one or a permanent one! Who knows what you'll get?

Thanks, Nexam.

I can't wait to see the text if they ever do a Ban Awareness Month.

Translation: the anniversary of when the Nexon database got hacked.

The pineapple? lol nexon..

 Spoiler

Pretty sure they're referring to people who make one word passwords based off words in the dictionary. (Think of the troubadour example but without all of the embellishments.)

How important is the PIC? Last I heard, it was the easiest portion of your account to compromise, easy enough that there was a PIC bypass(?); should I keep it at its current 16 characters, or can I shorten it to 6 and still be fine?

I only ask this because I'd like to shave off a few second off my login time for FM spots, Hired Merchant management and having to repeat the whole thing because I messed up a click somewhere.

How important is the PIC? Last I heard, it was the easiest portion of your account to compromise, easy enough that there was a PIC bypass(?); should I keep it at its current 16 characters, or can I shorten it to 6 and still be fine?

They can change your PIC straight from the website if they have your password to your account if we're talking about the easiest PIC bypass here. I don't even think you need your email last I checked?

http:// vs https://