RSA Security Token

What is a RSA Security Token?

A RSA Security Token is a piece of hardware issued by PokerStars, in addition to your password.

The token displays a six digit code that changes every minute. The bars on the left hand side of the display count down to indicate when the code is about to change.

Once a RSA Security Token is enabled for your account, you will be required to enter your RSA Security Passcode every time you login.

The RSA Security Passcode is a combination of two elements:

1. Your four-digit RSA Security PIN followed by
2. The six-digits currently displayed on the window of your RSA Security Token.

Note that the RSA Security PIN is not related to your PokerStars PIN.

The use of the RSA Security Token enhances account security by providing two-factor authentication, requiring you to have ‘something you know’ (your PokerStars password and RSA Security PIN) and ‘something you have’ (your RSA Security Token).

This feature is a strong defense against keyloggers and unauthorized people accessing your account.

How can I start using the RSA Security Token on my account?

There are three steps to this process:

1. Order your RSA Security Token from the VIP Store
2. Activate your RSA Security Token in the PokerStars software (you need to tell the PokerStars software that you have received a token)
3. Enable your RSA Security Token for use when logging in

Each part is now described in detail:

1. Order your RSA Security Token from the VIP Store
   
   You can order your RSA Security Token like any other item in the VIP Store.  To view the PokerStars VIP Store, open the PokerStars cashier and click on the link to the ‘VIP Store’.
2. Activate your RSA Security Token in the PokerStars software (you need to tell the PokerStars software that you have received a token)
   After you have received your RSA Security Token, you will need to activate it.
   1. Log into your account
   2. Click ‘Account’ on the menu bar in the PokerStars lobby, then select ‘Login Settings’. 
      
   3. Click ‘Activate RSA Security Token’ and follow the on-screen instructions.
      
   4. Enter the RSA Security Token Serial number into the prompt and click on ‘Next’. The Serial number is on the back of the token, and has nine-digits, starting with 20......:
      
      The token’s serial number is highlighted above. It is printed on the sticker and also engraved onto the token.
   5. Read the explanation of the Passcode and click on ‘Next’.
   6. Create a four-digit PIN. This is the first half of the Passcode. Then click on ‘Next’.
   7. Enter your Passcode – this is the four-digit code created immediately above, followed by the six-digit number currently displayed on the front of the window of the RSA Security Token:
      
      The total length of the Passcode is ten-digits:

      (RSA Security PIN)	+	(Token Code)	=	(RSA Security Passcode)
      (Your secret PIN code)	+	(The numbers on the window of the token)	=	(RSA Security Passcode)
      (4 digits)	+	(6 digits)	=	(10 digits)
      1234	+	590616	=	1234590616

      Click ‘Next’ after you enter your token code.
   8. Congratulations! Your RSA Security Token is now activated. Now that you have told the PokerStars server that you have a RSA Security Token, you need to tell the PokerStars server to require it for login.
3. Enable your RSA Security Token for use when logging in
   After you have told the PokerStars software that you have received your token, you need to tell the PokerStars software to start requiring its use during login.
   1. Log into your account
   2. Click ‘Account’ on the menu bar in the PokerStars lobby, then click ‘Login Settings’.
      
   3. Tick the checkbox next to ‘Enable RSA Security Token’.
      
   4. Provide the information requested in the dialog box. This prevents someone from turning your Account Security Enhancements on or off without your permission.
   5. Wait for confirmation from the PokerStars software that your new login settings are active. You will also receive an email confirming that your login settings have been changed.

Is there a way to disable this feature once I have activated it on my account?

Yes. To disable the feature, follow the instructions below.

1. Log into the PokerStars software
2. Click ‘Account’ on the menu bar in the PokerStars lobby.
3. Select ‘Login Settings’.
   
4. Clear the appropriate checkbox in the Login Settings Portal.
5. Click ‘OK’.

What happens if I lose my RSA Security Token?

If you lose your RSA Security Token, you will need to use the one time passwords provided to you at the same time as your RSA Security Token was sent to you. You will then be able to login to your account and disable the RSA Security Token setting, or order a new RSA Security Token.

To do so, when logging on, click on the button labeled ‘I have lost my token…’ instead of entering your RSA Security Passcode.

If you have lost both your RSA Security Token and your one time passwords, you will need to email support@pokerstars.com.

I don’t have my RSA Security Token, and I don’t have my One Time Passwords handy, but I’ve got a tournament starting soon and need to access my account in a hurry.  What do I do?

PokerStars has provided a ‘Restricted Access’ option to enable you to play in any tournaments that you have already registered for in case you misplace your RSA Security Token and One Time Passwords.  This will ensure that you don’t miss out on any tournaments you’ve already paid for.

To access this:

1. Enter your User ID and password as normal
   
2. Click on the button labeled ‘I have lost my token…’
   
3. Click on the button labeled ‘Restricted Access’
   

You are now able to play in any tournaments that you have already registered for. No other financial transactions are permitted to protect the security of your account.

I’ve forgotten my RSA Security PIN.  How do I recover it?

If you have forgotten your RSA Security PIN, you will need to email security@pokerstars.com. A staff member will need to contact you and verify your identity (to maintain the protection of ‘two-factor’ authentication) and then reset the RSA Security Token for your account.

You will then need to reactivate the RSA Security Token and select a new RSA Security PIN.

How do I obtain more One Time Passwords?

You can order additional One Time Password sheets from the PokerStars VIP Store

Will using a RSA Security Token make my account completely secure?

The use of the RSA Security Token can enhance your PokerStars account security and reduce the risk of key loggers, phishing attacks, and make it much harder for anyone to access your PokerStars account without having the RSA Security Token.  However no single feature in itself can completely eliminate the risk involved.

A RSA Security Token helps to reduce the risk of hackers obtaining access to your PokerStars account, and is an important part of our comprehensive security strategy.

Can I share my RSA Security Token with a friend?

The RSA token once activated is unique to your PokerStars account and cannot be used with another PokerStars account. It also cannot be used with a third party application that uses an RSA token, neither can tokens provided by a third party be used with your PokerStars account.

How long will the RSA Security Token operate for?

We expect the RSA Security Token to operate under normal conditions for around five years.