Login in real life - what breaks and why
First rule: the password is not in the browser manager. We see it in support tickets constantly - players come back, session expired, they click „Sign in" and Chrome fills the old password from two resets ago. Three tries. Fourth. Fifth. Lockout for 30 minutes. Done.
Second rule: SMS 2FA is the weakest option. SIM-swap in 2026 isn't a Hollywood plot, it's a real Telegram ad for $80. Use Google Authenticator or 1Password and you log in safely in 1.4 seconds - nobody can intercept the code. Period.
Third rule: Apple Sign-in after the April 22, 2026 update needed a one-time re-authorization. Players who skipped it now get an auth error with no clear message. Fix: sign out of iCloud in the browser, re-click Apple Sign-in, done in 40 seconds.
Last practical tip for Canadians: if you log in over a Telus or Bell mobile IP, you'll hit the geo-captcha more often. Not a bug, anti-bot. Drop the WiFi, try again on cellular - usually that's enough. If not: support chat, average ticket reply 4 minutes, that's measured, not estimated.