Why can we not log in using email?

As some admins reading this might already know, I have had "unresolvable" account recovery issues for an account I made a few years ago. It occurred to me recently that the vast majority of account-based sites allow you to use email instead of username in login credentials, even ones that might deal with actual sensitive information. My question is, why does this not exist in mapleroyals? It would save admins a ton of trouble dealing with lost usernames, and would be more convenient for many users. What is it about the way mapleroyals is set up that keeps this from being implemented, if any? We have PIC and PIN on the off chance that someone other than the actual account owner somehow gains access to username/password, so how much of a security concern is this?

Also, for the sake of any other people who might otherwise put a random or incorrect birth date when registering, please clarify that it is required for account recovery, if that hasn't been done already.

(I'm posting this as a public thread in the case that someone else has already addressed this issue, or other users have any input on the matter)

 

Nostalgically, username was used instead of email.

Emails are also easier to find as opposed to usernames, since most people use the same email for other applications.

 

Plenty of people also use the same username for other programs, particularly game-related ones. I feel like the difference between email and username in terms of security is negligible, especially if you take into account the extra layers of security they've already added.

 

I understand the purpose for this, as I believe Runescape did this exact change at one point but they are one of the biggest F2P MMORPGs out there. As this matter is quite insignificant and isolated to a very few, like yourself, it would not make any sense to change now; hence why the PIC and PIN was implemented. As this is how Nostalgic maplestory was. If it ain't broke, don't fix it.

 

Are you sure its isolated? I guarantee that a substantial number of inquiries about username recovery would not happen if this existed.

 

Think of it this way, if your account gets hacked, the hacker will most likely just have access to that one account and not your actual email as well.

 

With the post below, it looks to be very simple to recover account details, as the information required are quite personal to the original owner. If you don't have those, you either do not own the account or need to start recording your log in details elsewhere.

https://royals.ms/forum/threads/account-recovery.58313/

And Shane^ o/

 

Yeah, I've tried this like 3 times. They won't recover my account. I have the wrong birth date on the account and I don't remember the username. Email address and characters are apparently not enough. Also, I don't think telling people to remember their credentials is a good defense for having a bad recovery system.

 

Okay, so let's say theoretically there was no higher risk for email than username. Would there be a problem then?

 

That’s just hypothetical. It will always be better to have usernames as another layer of security.

 

Alright I'll proceed under the assumption that using email for login would otherwise be fine, since you didn't humor me. Why is an email plus one other piece of information not enough to recover an account then?

 

Seems like you don't have the other piece of information the want, the birthdate on the account.

 

This is also forgetting to mention you can 'tie' all of your accounts (aka when you create an account) to one e-mail. If you could log into the account via email, there'd be no way to tell which one you're logging into if you have 2 or more with the same email.

 

Well , this thread is irrelevant for me now since a miracle just occurred. I was using the voting platform to see if I could guess what my old username was, then I saw an autofill option I had never seen before (mind you I have not voted on this account for years) and it was actually the username of my other account. So, to be blunt, screw you mods. Its my account, I have proof, I know the username, I'm not a hacker.

 

I would prefer you be more careful with your words because it's unnecessarily rude and uncalled for; you're the one who forgot your username, not us. And we didn't call you a hacker. MapleStory as a game has never used email for login. It has always been using username. Perhaps from now on, note it on a notepad just in case your memory fails you again.

Locking up this since a miracle happened.