WoW authenticator tokens are single-use with a 30-second lifetime. On one hand, it's a testament to Blizzard's effectiveness in pushing them on the playerbase -

WoW authenticator tokens are single-use with a 30-second lifetime. On one hand, it's a testament to Blizzard's effectiveness in pushing them on the playerbase - the fact that enough accounts are protected by them now that the bad guys have to target them specifically is pretty impressive. On the other hand, it's scary that we're at the point now that the bad guys are developing attacks against hardware token-protected accounts. I've read the same thing about a WoW account - it's worth more than a stolen credit card, and is significantly easier to get ahold of. Not what I'd expect, at all, but given the lengths the bad guys go to in order to steal accounts, it seems like it lines up.