[Armada]

As inconvenient as this may sound from now on an IP change will destroy your session and log you out.

Accounts being sold were sharing cookies so that the session wouldn't need a login. I already know this would be an issue and I already knew this was how some of the recent sold accounts were utilized.

Those on dynamic IPs will need to login again every single time their IP changes. It will just have to be that way.

This will greatly assist with stolen or sold accounts used to scam. Forcing a login will give better results to the Trust Scan and the admin logs where I can spot these accounts much easier.

Sorry but this is just necessary if we're going to continue having a thriving Marketplace.

More measures will be into place asap. This is hardly the only thing I plan to implement. This site will have ultra high end security for accounts.

NOTE: If you'd like to test try to use a VPN, sock or proxy to access HF, that is if you can find one that works.

I wanted to reply to the actual thread, but the Boss closed it.
I have a general question about the IP change policy, which I am sure Omni will understand why I of all people am asking.

I login from literally numerous networks on a regular daily basis.
(Home, Cellular, Work, and others)
Sometimes off my phone and sometimes with my primarily laptop.
I not only have numerous IP#'s but numerous networks as well.

Now although these IP#'s I utilize do not frequently change, if at all, being I utilize so many networks, will I be constantly forced to login again, or will the system take in to account my "Usual IP#'s" and only force login on a new network/IP# ?

[Mr Kewl]

You'll have to login every time when there is an IP change when the system is working.

[Armada]

You'll have to login every time when there is an IP change when the system is working.

So even between my phone and my home connection for example, I will be forced to login again?

This really is not a complaint, its more secure so I am all for it, but I admit, this will be a true pain for some users like myself, especially being my PW is totally randomized and I don't remember it off the top of my head....

[Mr Kewl]

So even between my phone and my home connection for example, I will be forced to login again?

This really is not a complaint, its more secure so I am all for it, but I admit, this will be a true pain for some users like myself, especially being my PW is totally randomized and I don't remember it off the top of my head....

Yes, if both the IPs are different.

High end sites with a lot of commerce force you to login daily. Places like banks, online crypto wallets or just about any place with a valuable account. It's less convenient but more secure. At this point we need the more secure option.

^ Good point.

[Tʀᴀᴜᴍᴀ]

So even between my phone and my home connection for example, I will be forced to login again?

This really is not a complaint, its more secure so I am all for it, but I admit, this will be a true pain for some users like myself, especially being my PW is totally randomized and I don't remember it off the top of my head....

I see your point and frustration.

However, balance this out.
A couple logins everyday>or<15 BTC being stolen

[woahxx]

I was thinking that it was weird, thar I was logged out this morning. Now I understand :)

[SIM-1589588]

Is it already implemented? If yes, It's not working as I just moved from Wifi to 3g and IP got changed however I didnt had to relogin.

[Armada]

I see your point and frustration.

However, balance this out.
A couple logins everyday>or<15 BTC being stolen

Yea, again, not a complaint in any way, but yea, this will also be annoying at times, will just have to avoid swapping between networks so often I guess.

Thanks, closing now. 🤝

---

Opening as I have one further thought.

Would it not be a viable option for members to add "Trusted IP#" to their account to prevent the constant login?
- Just a thought.
Maybe create a maximum of 5 entries or something.
OR for dynamic users, allow a specific IP range?
Or would this essentially circumvent the security protocols implementation?

[opp]

Interesting. I was on my phone using hackforums yesterday and I was on LTE and when I came home onto my computer using my home network it did not ask me to sign in again.

[SIM-1589588]

Interesting. I was on my phone using hackforums yesterday and I was on LTE and when I came home onto my computer using my home network it did not ask me to sign in again.

Same thing. I just tried it again.
PS: .op which isp/carrier you are using?

[Egregious]

Hmm. I'm browsing on my phone (LTE) and home network and it doesn't log me out. I wonder why.

[Armada]

Same thing. I just tried it again.
PS: .op which isp/carrier you are using?

My point.

Primus
Rogers
Wind
and 2x Data center IP#'s

I have not been hit with the login issue, yet, but I am anticipating this due to my activity and networks.

[Doctor Blue]

So is it if your current IP is different from your latest IP or is it just if it isn't known?

[Kuso]

I probably wouldn't be annoyed by this if we didn't have the 2fa securit. But I want security.

[FamousHater]

Hmm. I'm browsing on my phone (LTE) and home network and it doesn't log me out. I wonder why.

there was an issue omni was fixing with it so pretty sure he disabled it until he gets it fixed