One Hit Wonder

Replied by Deezer

Two Factor Authentication (2FA) for Deezer

Forum|Forum|7 years ago
October 19, 2018
66 replies
6523 views

I really do not feel secure with simple login / password based authentication. When will Deezer have 2FA for its application and account. If you are not planning to have this feature soon, for me this will be one reason to stop using this service.

authentication

Show previous replies

L

lordofthefigs

Roadie

I have someone compromise my account and change the email address simply by know the password. Fortunately, Deezer support helped me fix the problem and I changed the password to a more secure one, but in my opinion 2FA should be implemented specially that our credit cards and whatnot are linked to the account.

Alternatively, email and password change should be confirmed by the registered email before it is implemented.

Rudi

Ultimate Superstar

Hi there @lordofthefigs

Thank you for your support. We're actually looking into this and other options to improve security, due to issues like the one you've had. It's very important to have your feedback so that the suggestion can take more priority :wink:

G

gandolf_wizard

Guitar Hero

Hi,

my account was hacked last year and I was lucky that I found out within minutes.

2FA would really help to improve security.

Also for the family account it would be nice to have different log ins so you can use a more complicated password.

Thank you :-)

Rudi

Ultimate Superstar

Hi again @gandolf_wizard

2FA is a good shout, we're aware we need to do something to do with authentication.

Regarding Deezer Family, don't worry, that one is coming soon :stuck_out_tongue_winking_eye: :zipper_mouth:

walker

Hitmaker

I don’t remember if Deezer tells you that your password is insecure when you are creating an account on Deezer. If is not:

Tell user that his/her password is fragile. Don’t allow typical passwords like Deezer, user, music, 1234,etc. Write a new one with symbols, numbers, capital letters, and at least 14 characters.
When changing password: don’t allow old ones and follow instructions of point 1.

More security things:

Tell users if their accounts have been hacked, to change password even if they haven’t been compromised.
Tell Deezers to change passwords every year. So brute force attacks have to start again.
option to close Deezer when you leave app => use password, biometric data for a fast log in.
Close Deezer if it hasn’t been used in 2 days, for example.
If you have already log in in a device, and you want to do the same in a second one, create a number in first device and verify it in the second. Or just at windows with “are you the one who’s logging in that device?”
Unlock Deezer with pre-registered devices, like headphones you use.

Your turn

Astell&Kern Norma SR15 + Sennheiser Momentum M2 AEG + Sennheiser HD 598 + Sony WH-1000XM2 + Sony WF-1000xm4 + own 2249 Hi-Fi/-Res Tracks + Deezer Freemium. Let's play!

Rudi

Ultimate Superstar

We're actually developing new measures to cover some of the security suggestions you made there @walker :wink:

I had to highlight your user recommendations as well :thumbsup_tone2:

H

hpguru

Ultimate Superstar

We're actually developing new measures to cover some of the security suggestions you made there @walker :wink:

I had to highlight your user recommendations as well :thumbsup_tone2:

Update needed.

I work in IT and I know for sure 2FA is almost a must when personal information… account details… I use 2FA on my Google account as well. This is ridiculous it’s not online by now already.

I don’t mind if someone will know what music I listen, I can show you my playlists, but personal details. Please. Make 2FA on Deezer, with a possibility to use it only on new devices. Thanks.