PIC Reset Security Campaign

http://maplestory.nexon.net/news/news/current/00G5M/

As part of our ongoing security campaign, we will be resetting account PICs. Maintaining a strong PIC gives you an extra line of defense against hackers, and changing your PIC every 3 months is essential to maintaining a secure account.

To reset your PIC, log into your account on the website, then visit the My PIC Info page here.

You can learn more about our security campaign in the Security Awareness Month posts here and here, and you can read up on the most recent changes to the PIC System here.

Thank you for keeping MapleStory secure!

And for the people without access to their email, sucks to be them :/

They didn't reset them, just error'd half of the people to try logging in. I somehow expected this to happen, them saying it's all intended.

Gonna be irritating fixing all my accounts. :/

And for the people without access to their email, sucks to be them :/

I have about 30 mules without e-mails so erm...

fml.

Typical, nexon.

Not like I recall the emails for some accounts.

Gee, thanks for the warning, Nexon.
Or did you have a database break-in and have to do this reset unexpectedly?

Ah well, only one account I don't have the e-mail for. I think.

Just a tip or heads up, if your PIC was reset (like all of my accounts) you can log in via gamelauncher and just type your new PIC twice.

Would have been nice for a little warning during the maintenance.

Seems like my main didn't get the PIC reset though. Guess it's only for those accounts that had that annoying message pop-up every time you didn't want to reset it.

But, if we just update our PIC every 2 months, we would never need access to our email, right?

Would have been nice for a little warning during the maintenance.

Seems like my main didn't get the PIC reset though. Guess it's only for those accounts that had that annoying message pop-up every time you didn't want to reset it.

I haven't reset any of my accounts' PICs and didn't get a PIC reset on the 3 I logged into. idk

Man, now I can't have my super easy pic anymore.

Just a tip or heads up, if your PIC was reset (like all of my accounts) you can log in via gamelauncher and just type your new PIC twice.

Oh bloody hell.
So now in the interest of our security, Nexon has left all accounts PICless?

Good thing the only account that I have no access to the email is deactivated.

And for the people without access to their email, sucks to be them :/

I have about 30 mules without e-mails so erm...

Not like I recall the emails for some accounts.

But, if we just update our PIC every 2 months, we would never need access to our email, right?

Good thing the only account that I have no access to the email is deactivated.

If you don't have access to your e-mail, you can change it through the website. You do not need access to your old e-mail to set a new e-mail address, but you will need answers to your security questions.

They didn't reset them, just error'd half of the people to try logging in. I somehow expected this to happen, them saying it's all intended.

This has actually been in the process for a few months now. Basically, anyone who didn't reset their PICs back when we changed the system in April were forcibly reset.

So now in the interest of our security, Nexon has left all accounts PICless?

No, only accounts which had been recently logged in were given that sort of reset (where they only need to log in and could set a new PIC). The rest will have to actually log into their account on the website to change their PIC through the normal method.

Long story short, we noticed a huge trend between hacked accounts and the last time someone changed their PIC. Some people literally had not changed their PIC since it was last known as a PIN. This is why we implemented the 3 month timer for PICs. However, many people ignored that strong hint (which we assumed they would), so we have actually forced the PIC reset itself.

Like any password, you should update your PIC frequently.

Two step verification anyone..?

The circumstances around the PIC make me unlikely to ever rely on it for account security -- it's very annoying to type anything that could be considered at all secure (8+ characters alphanumeric case sensitive), and even if I do choose something secure, I'd have to change it so frequently that I'd be forced to remember it by writing it down cause PIC input doesn't trigger the kind of muscle memory I need on secure passwords.

Any PIC that's got letters in it doesn't need anything so sophisticated as a keylogger - it's entered so slowly, and unobscured, that you can just stand near a person and read it off.

Gonna be sticking to "1111222233334444" type pics thanks all the same.

This has actually been in the process for a few months now. Basically, anyone who didn't reset their PICs back when we changed the system in April were forcibly reset.

Well, some notification given in advance(like on the SC notice) would have been nice. Eh though, it's not that bad.
I've used the same PIC since it's release, it's pretty secure, how long must I wait to change it back to that? (I tried changing it back right after updating, it said it's been used too recently. D: )

Well, some notification given in advance(like on the SC notice) would have been nice. Eh though, it's not that bad.
I've used the same PIC since it's release, it's pretty secure, how long must I wait to change it back to that? (I tried changing it back right after updating, it said it's been used too recently. D: )

Nothing is secure when Nexon's database can get broken into. Which I strongly suspect they think might have happened, or they wouldn't have got so aggressive about forcing this change without advance warning.

No, only accounts which had been recently logged in were given that sort of reset (where they only need to log in and could set a new PIC). The rest will have to actually log into their account on the website to change their PIC through the normal method.

This is weird because it was completely opposite for me. All my accounts in which i hadn't log in months got the "Easy login way" while my main, which i logged yesterday got owned, had to reset the pic the hard way and i had no idea how to do it..... God forbid but i had to actually "Do some reasearch" Scary.


EDIT: Nevermind, this happened because it was right after the patch, now that i finally logged out, i got THAT forced Reset, =P Now that i had reset on my own manually..... heh, at least i learned something new.

If you don't have access to your e-mail, you can change it through the website. You do not need access to your old e-mail to set a new e-mail address, but you will need answers to your security questions.

That account is ancient and I don't think there was security questions way back in 2006. I've pretty much given up trying to regain access to it anyway.