How 'secure' is SCID?

[Ajax]

Same here. Did not know that. Interesting that I can't see it on my mini that is connected to the same sc id as my main.

It can't be connected to the same SCID. Both may be remembered on the same device, and you amy have used one of the tricks to email addresses that allow variations to go to one underlying address.

But each account has to be on a different SCID, connected to an apparently different email address.

[ESCANOR0803]

Same here. Did not know that. Interesting that I can't see it on my mini that is connected to the same sc id as my main.

Scammers on Global hunted such ids where scid was not connected,i believe this was the reason Supercell decided to hide it when viewing other players profile.

[Piper139]

It can't be connected to the same SCID. Both may be remembered on the same device, and you amy have used one of the tricks to email addresses that allow variations to go to one underlying address.

But each account has to be on a different SCID, connected to an apparently different email address.

They each have a separate email address but they are tied to my sc ID so I can login to them both on either of my devices. In my thought, that puts them on the same sc Id.

[Kaptain Kat]

Kat, my apologies, in itself my response wasn't meant as personal as you seem to take it. I need to double check my wording as well sometimes

And I absolutely agree that people have a responsibility themselves. In fact, if we go by the ToS and such, and the ToS of for instance Google, kids below, what was it 13 for SC? and in quite a few countries for Google it's 16! can't even play CoC [according to the ToS/rules]...

In spite of the answers given by both you and Darian (and I totally understand that no 'specifics' can be given, that's not what I was after, even though SOMETHING would have been better than the nothing) I still don't feel comfortable.

Right now I don't like it at all that the status of accounts is visible for everyone (whether or not an account has SCID - due to the achievement) because that can be used as information to try and get an account from someone else.

At the moment with this expiration stuff part of me wants to go back to not having SCID, partially even because of what was posted in response here... Even though in itself I have nothing to fear since my accounts are mine.

I truly hope SC will put effort in improving security for our accounts. Not just for the money some have invested in their accounts... but simply the work done for leveling accounts as well.

And I apologize to you. I’m sorry but this thread is giving me a headache. For shizz and giggles you should read through it and you’ll notice the needle is stuck on the same few sections of the record.
It’s like A says I want to buy paint and I say we have all the colors like blue and green and yellow.. then C chimes in but I don’t like those and I say fine we have others as well and the D drops by and says but I don’t want regular paint I want spray paint. And E says I want wallpaper and the F finally says I just want blue paint how hard can that be....

I’m trying to take away concerns as much as I can, but we will never be able to take away all concerns and I’m sorry but we can’t take away yours either I’m afraid. I understand how it must feel but there’s little we can do. You want to know more about stuff that SC won’t share, even we don’t know the ins and outs and it all has to do with security.

First keep in mind that here on the forums we do read many cases of things going wrong according to the player. We don’t hear about the many many instances everything goes without any problem and is solved. Just think in sense of volume and millions of clash players. People don’t share the success stories because that’s normal and expected. They only share the ones with trouble and some loudly at that. Even if 1 in 1000 cases doesn’t go well then in total that’s still a huge number but a very low.
I certainly can understand that support can make mistakes but you also must understand players with these types of issues also don’t always paint a full picture and there’s more going on at the back end of things. As Darian said they see a lot.

Dont you think of it was really all that bad then we would hear much much more about it ?

The thing is quite often someone posts a whole lot of nonsense just to gain sympathy and get support from others. But it doesn’t make them right, quite regularly they never come back to the forum or fail to respond to the more critical questions. Now you can choose to believe all those stories or you could also choose to believe someone who is verified to be an employee of SC (Darian) who has responded several times in this thread.

Fun fact: through the years we’ve had several stories checked which really felt plausible whether it was bans for phishing or modding or account recovery gone wrong etc. in most cases we have had quietly checked it turned out there was a whole lot more going on then what was being told on the forums. Maybe I’ve seen it once or twice that a mistake was made in my whole forum career.
So yes forgive me when I’m really extremely critical when I read the story #64639.

On the expiration subject, they don’t just expire and it isn’t a technical issue or bug. When it says SCID expired it obviously means the email address of the ID doesn’t have a village attached to it anymore and there’s only 1 way that can happen. Which is through player support. Here’s a possible (but not so theoretical) scenario: A sells their village to B including the email address and passwords and the whole shabang. B changes the passwords and thinks the account is his and A can’t get to it anymore. (Yes it’s a TOS violation too but that’s beside the point) After a while A contacts player support to recover his account. Since he has owner info he can prove that he’s the original owner. Maybe A has a good story who knows. Support unlinks the village from the SCID and attaches it to a new email address and gives it back to A. B logs on one day and is surprised my the ID is expired and runs to the forum...

All in all no system can ever be truly perfect and sure there’s always room for improvement. Nevertheless I do have faith they do know a little bit about what they’re doing. Unfortunately due to security reasons they can’t share everything as to how these processes work from A-Z. A bank isn’t giving you that information either, you must simply trust them to a degree, a Casino doesn’t give all that information either. A chef doesn’t give away his prize wining recipe, a country doesn’t give you their nuclear launch codes..
Some may reveal some tidbits of information but it’s no more then a small peek.

[jaronhudson15]

From what is to be seen, any complaint in regards to account issues in this manner are stemmed from naivety.

From the beginning, SC has made it a goal to maintain player anonymity in a way. And, again, from what we know and see, SC ID is really secure.

This is truly the best it's going to get when the best security is at the judgment of the player. Other than that, it's always important to continue to educate the playerbase about how they can protect their account.

[Kaptain Kat]

Scammers on Global hunted such ids where scid was not connected,i believe this was the reason Supercell decided to hide it when viewing other players profile.

So many years of updates and changes I don’t remember it all...

I did recently notice that the Keep your village safe achievement is not visible on other peoples profiles. It’s only visible on your own.
I happened to look at it a week or 2 ago.

but I wonder if it wasn’t visible at one point to others because I vaguely seem to recall what you mention here that some people used to find people on global and alike and check to see if they were attached to SCID...

[Kaptain Kat]

They each have a separate email address but they are tied to my sc ID so I can login to them both on either of my devices. In my thought, that puts them on the same sc Id.

Each village should have its own e-mailadress. And that makes up one SCID.
1 village = 1 unique email = 1 SCID

You can load the SCID on all your devices so all your villages can be accessed on all your devices. Both my villages are accessible on both my devices.

1 SCID can have several different SC games attached to it though. To keep things simple.
1 clash of clans village
1 Hay Day farm
1 Boom Beach island
1 crash Royale game

[ESCANOR0803]

So many years of updates and changes I don’t remember it all...

I did recently notice that the Keep your village safe achievement is not visible on other peoples profiles. It’s only visible on your own.
I happened to look at it a week or 2 ago.

but I wonder if it wasn’t visible at one point to others because I vaguely seem to recall what you mention here that some people used to find people on global and alike and check to see if they were attached to SCID...

There was a post made on Reddit a year or two ago requesting to hide it.

[Piper139]

Each village should have its own e-mailadress. And that makes up one SCID.
1 village = 1 unique email = 1 SCID

You can load the SCID on all your devices so all your villages can be accessed on all your devices. Both my villages are accessible on both my devices.

1 SCID can have several different SC games attached to it though. To keep things simple.
1 clash of clans village
1 Hay Day farm
1 Boom Beach island
1 crash Royale game

Right. All I meant was that piper and jr are both tied to my sc id. However, other than that link visible to me, clash doesn't link them in any visible way. At least in game. Maybe my sc id friends can see it.

[JusMe]

Right. All I meant was that piper and jr are both tied to my sc id. However, other than that link visible to me, clash doesn't link them in any visible way. At least in game. Maybe my sc id friends can see it.

I don't think so. If they are friends on both of your ID's they can see both ID's, but they don't/can't see that Piper1 and Piper2 are 'related' in any way.... But that's from me - and I also didn't remember the achievement hiding status