Losing access to an old gaming account is already frustrating. Losing it while being able to provide extensive information about that account is considerably worse.
A recent experience reported to GamingHQ has raised questions about Square Enix’s account recovery process after a player was unable to regain access to an old account. The incident occurred on August 20, 2026.
According to the player, they could provide extensive information connected to the account, including details about games they had played, purchases they had made, and the servers they had used.
There was one major problem: they could no longer remember the answer to an old security question.
The account was ultimately not recovered, leaving the player to create a new Square Enix account and effectively start over.
Square Enix Removed Security Questions Months Ago
What makes the situation particularly frustrating is that Square Enix officially removed its Security Question and Answer system on February 24, 2026.
Square Enix announced the change one day earlier, explaining that the fields would disappear from registered Square Enix Account information. Existing answers would also no longer be visible.
More importantly, Square Enix specifically addressed their role in account verification.
The company stated that security questions had previously been used as part of its verification process when changes were made to an account. However, Square Enix said the information “will not be required in future.”
That change happened almost six months before the account recovery experience reported to GamingHQ.
If the inability to provide the old security answer was indeed the deciding factor in this case, it creates an obvious question: why should information that Square Enix officially retired in February still prevent a player from recovering an account in August?
The Player Could Remember the Account
This was not a situation where someone approached support with virtually no information.
According to the account provided to GamingHQ, the player knew extensive details surrounding their history with Square Enix. This included information about games, purchases, and the servers on which they had played.
Those are details that can potentially demonstrate substantial familiarity with an account.
Yet knowing years of account history apparently wasn’t enough to resolve the situation.
The forgotten security answer became an obstacle that the player could not overcome, and the old account remained inaccessible.
For anyone who created an account many years ago, that presents a serious problem.
A security question may have been answered a decade or more ago. A player might remember the game they played, their characters, their server, what they purchased, and years of other information while having absolutely no idea whether they entered a particular security answer with a nickname, full name, different spelling, or something completely different.
Remembering one old answer should not necessarily be easier than remembering years of actual account activity.
Square Enix’s Own Support Information Makes This Stranger
Square Enix still provides recovery options for people who have forgotten their Square Enix ID or password.
Its current support information directs users toward the Account Management System’s recovery process. Square Enix also provides routes for users who need additional assistance with account access.
Other Square Enix support documentation similarly tells users to contact the Support Centre when certain account credentials cannot be recovered normally.
That doesn’t mean providing purchase or character information automatically entitles someone to access an account. Square Enix has every reason to maintain strict verification standards.
Account recovery systems have to protect players against social engineering and account theft.
However, there also needs to be a reasonable path for legitimate owners who have lost access to one piece of outdated information.
Security Cannot Mean Making Recovery Impossible
Strict account security is important.
Someone knowing a character name or server should obviously not be enough to hand over an account. Much of that information can potentially be discovered publicly.
Purchase records, historical account information and multiple matching pieces of private information are another matter.
A robust recovery procedure should ideally allow support agents to combine several forms of evidence when one particular verification method is unavailable.
Otherwise, security risks becoming an all-or-nothing system.
If someone can demonstrate extensive knowledge of an account but fails one historical question, the answer should not automatically become “make another account” without every reasonable verification option first being exhausted.
There is an enormous difference between making account theft difficult and making legitimate account recovery unnecessarily difficult.
Years of Purchases and Progress Can Be Attached to an Account
Gaming accounts are no longer disposable usernames.
Players can spend hundreds or even thousands of hours building characters and progressing through games. They can also accumulate years of purchases, subscriptions, expansions, licenses and other account history.
Square Enix operates games where that history can be particularly significant.
Final Fantasy XIV alone can represent years of character progression, achievements, items and memories for a long-term player.
Telling someone to simply create another account doesn’t restore any of that.
It gives them access to Square Enix’s services again, but it does not solve the original problem.
Square Enix’s February Change Was Supposed to Improve the Experience
There is another reason this case stands out.
When Square Enix announced the removal of security questions, it explicitly described the decision as part of its efforts to improve customer experience. The company also said removing the system would maintain account security while improving that experience.
That is a sensible change.
Security questions have an obvious weakness: people forget them.
The answer someone considered obvious when creating an account many years ago may no longer be obvious today. People also intentionally provide unusual answers because truthful answers to common security questions can sometimes be discovered through social engineering.
Removing them therefore makes sense.
But that makes an August 2026 recovery case involving an old security answer particularly difficult to understand.
Square Enix Should Offer Meaningful Alternative Verification
GamingHQ is not arguing that Square Enix should simply return accounts to anyone who knows a few details about them.
That would create an enormous security problem.
Instead, account owners should have access to a meaningful alternative verification procedure.
That could involve combinations of historical billing information, transaction records, registered personal information, previous email addresses, product registration information, subscription history and other details that are difficult for an unrelated person to obtain.
Two-factor authentication should also be strongly encouraged once access has been restored. Square Enix itself recommends enabling 2FA as an additional layer of account protection.
What shouldn’t happen is a legitimate player reaching the end of the support process and being left with no practical solution because they cannot remember one answer created years ago — particularly after that verification system has officially been retired.
Players Shouldn’t Have to Abandon Their History
Square Enix deserves credit for removing security questions from its account system.
But removing the feature only solves part of the problem if historical accounts can still become exceptionally difficult to recover.
The player who contacted GamingHQ ultimately created a new account after failing to regain access to the old one.
That may allow them to play again.
It doesn’t give them their old account back.
For a company responsible for games that players can remain invested in for many years, account recovery needs to recognize that reality.
Security should protect a player’s account.
It shouldn’t become the reason the legitimate owner can never access it again.
