I've noticed in the last week or so my password would change and I would have to reset it. Is this happening to anyone else?
Password seems to change
-
Madea -
June 13, 2021 at 2:43 PM -
Closed
-
-
Are you referring to your forum password? i’m a little confused by this post
-
I've had to reenter my password a few times to get it to accept my email but the password has not been an issue for me.
-
Quote
↩ UnderTails Are you referring to your forum password? i’m a little confused by this post
Sorry for not clarifying, but it's for the forums.
-
Do you have evidence that the password is actually being changed, or do you just think that that is the case because you can suddenly no longer log in?
-
It's worth noting that the forum is using some add-ons which could cause this (Well, not quite this but similar).
We check passwords against HaveIBeenPwned (There's a secure way of doing it, I am rubbish at explaining the details but in short it's handled in the browser and we never see your password) which will force you to change the password if your password shows up in a breach, that check happens on every login.
And likewise we have a "Free e-mail address" ban tool as well which will check your e-mail every time the profile is changed, and if it matches a domain blacklist (Which we don't maintain and is centrally maintained by the plugin dev) you'll have to change it.
Doesn't explain quite the behaviour you've described but is potentially useful info either way.
-
Quote
↩ @'Ryan' We check passwords against HaveIBeenPwned (There's a secure way of doing it, I am rubbish at explaining the details but in short it's handled in the browser and we never see your password) which will force you to change the password if your password shows up in a breach, that check happens on every login.
I am assuming this secure way involves hashing.
-
Quote
↩ StevenNL2000 Do you have evidence that the password is actually being changed, or do you just think that that is the case because you can suddenly no longer log in?
It logs me out, and when I tried using the saved password (which worked before) it said invalid or wrong password or something along those lines. It's now happened to me twice since creating this thread. It should be noted that the password I used has never been used for anything else, to respond to what Ryan said above.
-
↩ Windows You can read about it here:
https://www.troyhunt.com/ive-just-launc…cyandkanonymity↩ Madea In that case, I think the password is not being changed, but rather becoming corrupted or uncheckable. Does your password contain special characters? Are you using a password manager to generate it?
-
Quote
↩ StevenNL2000 Does your password contain special characters? Are you using a password manager to generate it?
Neither. They're just simple phrases similar to "TheBaddestOneInTown" (not my password btw, just an example). My passwords are being saved with iCloud, but that shouldn't have a difference.
-
Perhaps check https://haveibeenpwned.com/Passwords to ensure the password isn't pwned.
-
Quote
↩ Fleek Perhaps check https://haveibeenpwned.com/Passwords to ensure the password isn't pwned.
None of the passwords I've used on here showed up on there.
-
-
wild1145
July 17, 2022 at 1:44 PM Moved the thread from forum Imported from Flarum to forum Bug Reporting. -
- Official Post
Closed due to the move to WoltLab. If the issue still occurs here please raise a new bug report with updated information.
-
wild1145
July 23, 2022 at 12:49 PM Closed the thread. -
wild1145
July 23, 2022 at 12:49 PM Moved the thread from forum Bug Reporting to forum Closed Reports.