Confirmation key.

[Korp]

Hello.

I have a question regarding Confirmation keys...
A friend of mine just ordered a new confirmation key to receive a brand new recovery key. But when he received the confirmation key,
the letter said it was vaild for 6 months, instead of 60 days which it has always been.

So my question is, are you able to order more then 1 confirmation key at the same time?

Lets say that you buy a character from someone who ordered a confirmation key, he gives it to you when the trade is happening and you get a brand new recovery key.
Seems trustworthy, right?
But what if he ordered 2 keys? (IF this is possible) - In that case, you use the key u get in order to get your recovery key, you change adress information on the account
to your own adress and everything seems to be a good deal.

But if the second confirmation key that the previous owner ordered is vaild for 6 months, this means he can still use it like 5 months after the deal, even tho the account is registered on the new owner?

I'd like to hear your thoughts about this, and I hope that it's NOT able to order 2 confirmation keys at once.

Thanks in advance,
Korp.

[smeg]

Sadly it is possible to do this. A lot of people don't know it, but it has always been possible to order 2 confirmation keys and hack the character after the registration has changed. Recently they changed the validity of the confirmation key from 60 days to 6 months indeed, which means the character could get hacked for nearly half a year after the registration has changed instead of 59 days. So, yes the amount of time it takes to have a completely safe account has been significantly increased.

[Korp]

So it is possible...
But it still seems abit wierd that both of the confirmation keys is vaild at the same time?
Lets say that you forgot your password for ex. Tibia.com, and you choose to recover it - you get a brand new password sent to your mail..
But if you do this twice, the password that you recieved the first time is not vaild anymore..

I thought this would somehow work the same way?

[torsten123]

Yes, there is nothing stopping the previous owner from ordering a second confirmation key during the 30 days it takes to change the registration which means the account is sadly not safe from being hacked until 7 months after (1 month for registration change + 6 months if he orders it on the last day) you purchased the account.

This means that you should make sure you order and keep an unused confirmation key after the registration change is done. This would give you the account back and render his recovery key useless in case he decides to hack you during these 6 months, you may lose all the items on the character but at least the account is safe.

[torsten123]

So it is possible...
But it still seems abit wierd that both of the confirmation keys is vaild at the same time?
Lets say that you forgot your password for ex. Tibia.com, and you choose to recover it - you get a brand new password sent to your mail..
But if you do this twice, the password that you recieved the first time is not vaild anymore..

I thought this would somehow work the same way?

The only thing rendering a confirmation key invalid is using it or if it's not used withing the validation time.

Ordering a new one, etc, doesn't make previous ones invalid.

[Korp]

You're not able to order a new confirmation key when the account data is in 30 days pending for change. It has to be cancelled first in order to be able to order one. Therefor he/she must have ordered both before giving one of them to me..

A possible way would be to ask the seller for a print screen of his previous transactions on his bank account. In case there are 2x 5 euro withdrawals to cipsoft, it's time to take a step back.
Sure he could order one right away after doing this, but it would be a little help on the way..

[torsten123]

You're not able to order a new confirmation key when the account data is in 30 days pending for change. It has to be cancelled first in order to be able to order one. Therefor he/she must have ordered both before giving one of them to me..

A possible way would be to ask the seller for a print screen of his previous transactions on his bank account. In case there are 2x 5 euro withdrawals to cipsoft, it's time to take a step back.
Sure he could order one right away after doing this, but it would be a little help on the way..

You are actually able to order it under the 30 days of the registration change, it would be completely retarded by Cipsoft to not let you do that.

If you weren't able to order it when it has a pending registration change you'd be completely locked out if your account got hacked and you didn't have a recovery key. Which would be stupid beyond all reason.

[smeg]

You're not able to order a new confirmation key when the account data is in 30 days pending for change. It has to be cancelled first in order to be able to order one. Therefor he/she must have ordered both before giving one of them to me..

A possible way would be to ask the seller for a print screen of his previous transactions on his bank account. In case there are 2x 5 euro withdrawals to cipsoft, it's time to take a step back.
Sure he could order one right away after doing this, but it would be a little help on the way..

Since when is it not possible to order a confirmation key while there is a registration change initiated?

The printscreen doesn't help anything in my opinion, there are plenty different payment methods to purchase a confirmation key with, such as paypal, bank, creditcard etc.
And even after an insight in the whole financial situation of someone by screenshots of all of this it could still be easily bypassed. Your best shot it probably too keep a confirmation key ready incase your account gets hacked, as torsten123 already mentioned, or not buy tibia accounts at all xD

[Korp]

My bad, I totally got that wrong!

Any other idéas than the one I mentioned above to try making it as safe as possible?
I'm about to make a deal through Allegro in Poland (a friend of mine handles the deal in Poland since i'm swedish myself.)
And I guess Allegro doesn't have any policy for this, since it could be done so long after recieving what "you paid for".

[Evancion]

Wait, so hold on.

Account buyer: buy account!! plx
Account seller: I sell account
Account buyer: 5$
Account seller: accepted!
<account seller gives account to account buyer, account buyer gives 5$ to account seller>
<account buyer changes email and registration address, begins 30 day wait>
ONE DAY LATER ...
<account seller secretly buys confirmation key for account>
30 DAYS LATER ...
<account is officially registered to account buyer's address and buys confirmation key>
5 DAYS LATER ...
<confirmation key arrives to account buyer and he/she uses it to create recovery key>
1 DAY LATER ...
<account seller uses confirmation key that he got 34 days earlier and gets access to the account again>

Are you saying the account seller can do that?

[Korp]

Yes, that is exactly what seems to be possible.

[Evancion]

Well, I guess you could wait for the day to get hacked then use your confirmation key to get it back too.
The seller can't get it back after that because he would have already used that confirmation key, unless he/she has more...

[Evancion]

http://forum.tibia.com/forum/?action=thread&postid=35870356#post35870356

When you use a newer confirmation key, the old one becomes invalid.

[smeg]

http://forum.tibia.com/forum/?action=thread&postid=35870356#post35870356

When you use a newer confirmation key, the old one becomes invalid.

What if you use the "old" one first and keep the new one to use at a later stadium?

[Evancion]

I would guess it's still valid, I'm not 100% sure. You can post in that thread if you are curious about it.

[Asus]

I will answer your question! :D

My brother had a confirmation key and by mistake he bought another key on the same account and while he lost his account, so he used one of does after he stopped playing tibia when he left to Germany to work for 4 months weird crap was that his second confirmation key worked when he camed back from Germany he used it because he forgotten his password on tibia na e-mail

[jikoe]

I will answer your question! :D

My brother had a confirmation key and by mistake he bought another key on the same account and while he lost his account, so he used one of does after he stopped playing tibia when he left to Germany to work for 4 months weird crap was that his second confirmation key worked when he camed back from Germany he used it because he forgotten his password on tibia na e-mail

nice translator?

[Asus]

nice translator?


No? Im in the lesson I'm writing from the phone so it might make no sense

[Korp]

I wrote a mail to CipSoft about this, and got the respond:

"Thank you for your request.

Confirmation keys are only valid once. As soon as you have used a confirmation key and the new recovery key was displayed, the confirmation key becomes invalid. Further, confirmation keys are only valid 60 days. You can find the expiry date of your confirmation key in the letter in which it was sent to you.

Finally, a confirmation key becomes invalid as soon as a new confirmation key is displayed on the screen.

Kind regards,
Puri
Tibia Customer Support"

[xelitex117]

thanks Korp very valuable info