3 ms·
What do you do if you find your password was compromised?
by tclancy 6y ago
What do you do if you find your password was compromised?
- dependenttypes 6y agoI use randomly generated passwords that are unique per site. It is more likely for someone to socially engineer the site support (or the registered mail account) than to guess it. Another annoying thing is that some sites do not consider your password enough even if you do not have 2fa enabled and they insist on sending you a mail (thanks github! - I can't connect to my account there because the registered mail was in my old domain) or an sms (thanks google/twitter! I had not even provided my phone number yet somehow giving it to you will verify that it's me)
- pas 6y agoHow do you reclaim your account safely without some pre-shared unique/secret thing that identifies you as the "rightful" user? Password reset email is great if you forgot your password, but this just means you can't make it more secure than your email account.