https://www.nbcnews.com/tech/tech-news/thousands-guild-wars-2-accounts-hacked-flna985019 Rule number 1 for ANY GAME is do NOT NOT NOT make the e mail address a part of the login system. I havent a clue why you would. THAT is the weak point right there. I create a character. I meet someone. Hey I want to chat with you on this subject outside the game, whats your e mail address.... Step 1 of being hacked is accomplished. Step 2 run an auto password cracker on it. Doesnt matter WHAT your password is, or HOW MANY TIMES you change it - they can still hack into it, because it is linked to your E MAIL ADDRESS..... DUH! Now post all the rebuttables you want to this, but the point is, once they have your e mail address, which you CAN NOT change, they CAN hack you.... So WHY make the password so damn hard to control when the real weak point of being hacked ISNT changeable?