This update includes a major backend and login flow rework focused on moving away from the older hard-locked HWID/device binding system and toward a more flexible roaming account session model.
What changed
- Reworked account access logic to support roaming session-based login
- Reduced reliance on hard locked HWID-only account access
- Players can now move their account between supported devices more cleanly without being permanently tied to one machine
- Added improved session validation to better manage active logins
- Added resume session handling so accounts can recover more reliably after reconnects, restarts, or interrupted play
- Introduced heartbeat/session activity checks to monitor whether an account session is still legitimately active
- Added logic to detect stale or expired sessions so old locks do not remain in place unnecessarily
- Improved handling for duplicate session conflicts
- Added support for controlled session takeover/reclaim logic where appropriate
- Improved backend support for registered/known device tracking without relying purely on HWID lock behaviour
- Expanded internal tools for clearing old account/session keys in batches to support testing, maintenance, and future live operations
- Carried out backend testing around removing legacy device lock states from accounts
- Improved long-term maintainability of account access and login recovery systems
Why this matters
Previously, account access was much more tightly bound to a single device or hardware identity. That worked for early testing, but it was restrictive and not ideal for players who want to resume play across devices or recover access more smoothly.
This rework is aimed at making account login feel more modern, flexible, and maintainable while still protecting against duplicate or invalid sessions.
In testing / ongoing work
This system is still being actively tested and refined. The goal is to ensure:
- smoother multi-device account access
- safer session recovery
- fewer false lockouts
- cleaner handling of expired or abandoned sessions