[Zexo]

But my dude, I just made a crazy complex password formula I was gonna use for different sites. Now I already need to add some sort of incremental pattern.

Same I made a super duper long one ;(

[PrivateDonut]

Maybe just force password changes for users who do not have gauth/authy enabled on their accounts? Either way, it wouldn't really bother me with changing my password if it was required.

[exploit.c]

Try resetting your password with an email, and use the password Hackforums supplies you (jumbled letters).

Everytime you forget the password, just check your email ;)

Until someone pops your email, and doesn't have to reset the password since it's already been reset so it looks more legitimate and not stolen.

[YayHar]

Until someone pops your email, and doesn't have to reset the password since it's already been reset so it looks more legitimate and not stolen.

That's why you use Gauthy which requires access to your phone.

[exploit.c]

Ahh, have to think of a new password for hf now. Let's see...😧

Well, I really dont like keep changing password coz I'll forget them all.

I remember there's a forum that force me to reset password, then each time I need to access the forum, I always request a password reset coz I never remember what new password I set for it.😧

That's why you use a password manager and just forget about it. KeePass is wonderful.

[PrivateDonut]

That's why you use Gauthy which requires access to your phone.

Or use an email that is only used for hackforums; and never share it with anyone. Then you wouldn't have to worry about someone jacking it. 😏

[exploit.c]

That's why you use Gauthy which requires access to your phone.

Suppose authy is linked to your email, you "lost your phone", you then request reset access to it in authy, login on a new device you now owned the 2FA. Therefore presenting the phone required useless. It wouldn't function like this on guath though

[PrivateDonut]

That's why you use a password manager and just forget about it. KeePass is wonderful.

Since it seems to store accounts locally, it seems like it wouldn't be to safe. I use a password manager currently, just never heard of KeePass.

[YayHar]

Or use an email that is only used for hackforums; and never share it with anyone. Then you wouldn't have to worry about someone jacking it. 😏

That is what I have on my account ;3

[Sevn Alias]

I heard that Hackforums database got leaked somewhere?

[YayHar]

Suppose authy is linked to your email, you "lost your phone", you then request reset access to it in authy, login on a new device you now owned the 2FA. Therefore presenting the phone required useless. It wouldn't function like this on guath though

Isn't gauth the same as Authy? 😧

[PrivateDonut]

Suppose authy is linked to your email, you "lost your phone", you then request reset access to it in authy, login on a new device you now owned the 2FA. Therefore presenting the phone required useless. It wouldn't function like this on guath though

Authy always sends a SMS (text message) when you try to access it from a new device. At least it does for me. So without that code, you won't get to far.

[ClassifiedHex]

This is scary. Hope this gets resolved quickly

[Roytoy]

I'm a bit confused. Do we have to do it if we already did it yesterday?

[Redwall]

Sounds needed.
Safety is key.