4 ms·

> You don't need to confirm anything to change the email on your account! Not even click an email link! Same with instagram. If you don't have 2fa on. I've had

> You don't need to confirm anything to change the email on your account! Not even click an email link! Same with instagram. If you don't have 2fa on. I've had my account taken over and couldn't believe it. Utterly pathetic levels of security

ubercow13 7y ago
You mean you can change the email without a password? Why would it be a problem if they require your password but nothing else in order to change your email?
- easytiger 7y ago
  I'm saying its a problem to change the email without using an email verification link to do so
  - croon 7y ago
    What if you're changing email because you no longer have access to your old one?
    - easytiger 7y ago
      What legitimate scenario would manifest that situation? That is a by far and away a tiny, minuscule, edge case