Limit user login to a country

[Chearful]

Basically, in your settings you can set which country you want to limit logins to. i.e
If I set it up to UK, then I can only log into my account if the IP is from the UK and if I try logging in from Spain, it will reject me.

It's just another layer of security that can be built on.

 

[Tank]

As mentioned above you can turn it off.....

Didnt Read the Replies, Just did lol

 

[Reversi]

Unless you signed up with a private VPN and consistantly use it on this site. It's incredibly easy for staff to see:

- Your country
- Your internet provider
- Your general area on the earth.

So if you haven't used your VPN 100% consistently then they'll still be able to find it.

A vpn isn't the only way to hide/mask your ip.

 

[m32]

What's really missing is the ability to see which IP addresses have been used to sign in to an account, and get notified on a login from a new location.

It should be the user's responsibility to be aware of account activity at all times, it is the service's responsibility to the user to provide the necessary tools and information. You can try and prevent illicit things from happening as a service, but in the end the best way to do it is to let the user be the safeguard. 2FA already serves as a last standing defense against attackers, preventing logins through another method is probably overkill. You can never go overkill on accurate information and record keeping though.

 

[Tracer]

You can disable the features and your IP is already logged, so it doesn't make a difference.

Mate, I know how XenForo works. I could've been using a VPN this whole time. I haven't because this is a Minecraft forum ran by teens. They can't do anything with my location.

 

[Walrus]

Extra layer of security, yes. However it seems pretty useless.

 

[mattrick]

I like the idea but, What's so hard about not downloading rats and making your passwords complex ?

Password complexity isn't the issue, its password reuse. There's been a huge amount of plaintext leaks which is likely why there have been a spike in hacked accounts. I doubt many people here have the will or know-how to bruteforce a password on a random user (although, you still should have a decently complex password).

 

[Ajdin]

http://www.mc-market.org/account/manage-security
This security page was implemented, partly because of this suggestion.

I'm going to go ahead and move this thread to the right section.