I think that if a person is insecure enough that their account gets 'hacked', they'd be insecure with the separate password as well.

Interesting, but does not think that could confuse even more players? If it gets the password, how to recover? If you have a password to delete planets, how about a password to delete the account differs from traditional?

Someone letting themselves get infected with a keylogger really sounds like them being insecure and not the fault of any systems they try to use.

I have a serious question for you: how many password-protected systems do you use that have multiple passwords for different functions within that system?

I'm also against a second password.

Another solution to this problem could be an option to block the possibility to abandon planet & moon.
When activated, we can't abandon planet/moon until 48h after the option is removed.
For players using temporary planets, possibility to add an exception to the block but the planet/moon abandonned must have no fleet to be deleted
Protection for miner accounts: Only 1 planet can be deleted per 24h Except for planets colonized within the last 24 hours (for when you colonise many planets in beginning of universe for example)
When this option is off, it's like it is right now. And since it concerns security, an email when it is removed could be great.

This limitates a lot the damages of an intrusion on an account since they now can't delete all your planet & moon in 3 minutes.

i think its way secure enough how it is now, if the game just wouldnt send login-passwords as text around in GET-Methods!

sounds arrogant but: if you're dumb enough to type in your password at the wrong place and you are'nt fast enough to change it... sorry but thats definitly his/your own fault.

It's not a good way to think it's "the users's fault". You told it your self, data is clearly sent via get method... and we would say it's the user's fault if he gets hacked?!

This will be corrected in 5.3, but anyway, users's password will remain in the address bar for months (and even years). It's not everybody that will know they have to change their password to be secure.

Come on... And even if it was the users fault, that is not a reason to not try to minimise the effects of the intrusion (by making it impossible to abandon every moon/planet of an account in 2 minutes).

i just dont think its the right way to solve the problem of "hacking" or something similar...
taken it to the extreme, we'll just end up with confirming every action with a seperate password.

I don´t think that is necessary to have a password there, not the equal one (which is currently enabled) and also not a different one.
If you play the mobile version, with enabled setting or on the ipad, or via facebook there is no password needed (since 5.0.0).

@Toxicterror check out 5.3.0 @ origin

LG

yep joky was waiting long time now for it :)

will there be something like a "are you sure you want to abandon this planet" warning?
because this is one of the things that you wont do a lot and i think it should deserve a warn-sign :D

Maybe if we change it totally

LG