Bitcoin Forum

Hello everyone. I recently noticed that by using the https://bpip.org/ site, you can check whether that person recently changed his or her password or not. Also, you can check by viewing the profile itself. It will say, 'This user's password was reset recently.'

Is resetting passwords that bad, or why was this option even added there? Will the message disappear after 120 days?

I know it may be added as a security measure like scam or buy-sell accounts, etc. But when a person sees that message, he or she may get a bad impression of the account. He or she may not trust the person, or the account may not get much interaction. Because I chanced password, now I'm tagged with that message.

Why have I changed my passwords several times?

1. I'm a custom ROM user. So I have to factory reset my phone in order to test the new build. I recently flashed several Roms to test.
(Clean flash is mandatory to avoid bugs)

2. I don't have any second devices. So I can't just have it logged in on another device.

3. I easily forget. One time I even forgot or confused my username because I used 0 (zero) instead of o in my username.

4. I always think of BTT as a highly valuable platform. I'm in fear that my BTT account would get compromised someday if I saved my password in an online place. So I never saved my password anywhere. (I know I should have used a diary to note down my password.)

p.s: By the time of my writing, I don't remember my password. :P

Changing your password is for your own account protection, and I don't see anything bad in that.
I believe the viewing option was added there to warn other users of the changes that have happened to the account recently; both email and password changes usually appear on the user's trust page.
 
And yes, the message usually disappears after a short period of time. 30 days, I guess, will be enough to warn users of the change. And the warning message will automatically disappear by itself.
 
A change in the user's password most often draws attention to the account, as there might be a possibility of the account being hacked and ownership changed.

I have changed my password before two times and there is nothing bad there as long as I do not change hand on this forum. But if someone left his account and not visiting this forum again, but password reset and visit this forum, some people may first noticed him if his account has changed in the way he is posting, which indicates that the original owner is not the one using the account to post.

On bpip.org, it will remain there.

Well, I am the original owner. I created this account in about a year ago. That time I couldn't be active due to some personal matter. But now that I'm totally free, I wanna dedicate my time to learn more.

p.s: The email is unchanged, I just had to reset the password several time due to the custom ROM testing.

Just do not spam, plagiarize or violate other rules of this forum, but make quality posts and you will be good.

Don't change your password then. Or stake your address (https://bitcointalk.org/index.php?topic=996318.0) and sign a message if you need to prove you're still you.

I don't think you needed a whole new thread for this.

This is a wrong perception. A notification of password recently change doesn’t give bad impressions. It’s just a security purposes to notify you and other member that you change password recently. Changing password regularly is a safe practice to protect your account given that you will remember all the changes.

The only time this action will be a bad impression is when you do a shady activity such as asking for loan or anything that involved money here since this will cause suspicion that your account is compromised.

Changing your password from a weak one to a strong one or from a strong one to a new strong one, is good.

It is bad if your changed password is a weak one, so that change means very little.

Are your passwords in the green? (https://www.hivesystems.io/blog/are-your-passwords-in-the-green)

Don't care about BPIP. You are Bitcointalk member, not BPIP member and BPIP can die / abandon anytime but I am quite sure that Bitcointalk will not die.

For proof of your account, you can do as follows

• Sign a Bitcoin message
• Stake a Bitcoin address
• Stake your PGP key (https://bitcointalk.org/index.php?topic=5461523.0)

Resetting your password is not an issue if you have a good reason for doing it. The warning is put in place for anyone trading with that user to take some extra precautions. This could be asking you to produce a signed signature from an address you used at some point, which will not be an issue since you're the owner of the account.

You can preempt this and make a reply in the stake your address thread^[1] about the change in password or email.

If you can remember your password, it's a poor password choice and should be changed.
Passwords should be complex with a mixture of alphabets, numerals and special characters.

[1] https://bitcointalk.org/index.php?topic=996318.0

- Jay -

I don't know about quality posts, everyone has their own version of quality. For some it may qualify, for some it may not. I don't know. I am not that dumb to post like hi,hello,good morning etc. If I knew the answer to a question I would surely answer or if I had questions I would surely question.

I understand sir, It's a serious platform/community. I would try my best not to spam or violent any rules.


I just have to reply with my btc address in that thread?  Did you meant that? Sorry for the inconvenience I never signed before.


Not sure how to do these, need to google or search thread I guess. But thanks anyway. Really appreciate it.

 

You are to sign a message which can only be done by the owner of the private keys, showing you own the bitcoin address in question.
You post that signed message in that Stake an address thread. Someone will verify the signature and quote the message to lock it in.

Here is a useful guide on How to sign a message?! (https://bitcointalk.org/index.php?topic=990345.0)

- Jay -

You don't know?

Read How to sign a mesaage? (https://bitcointalk.org/index.php?topic=990345.0) (the original version but now images are broken).

If you need images, check the copy cat with working image links (https://bitcointalk.org/index.php?topic=5456712.0)

In the context of his post, I also do not think that a new thread is need for this. But generally speaking I have seen people hunting other users because of password change. Whenever there is a password change or an email change, they'll immediately allege that it is an account changing hands.

---

OP, the security log captures password change and email change for trade reasons. Someone's account might be compromised and you will hastily trade with the wrong one if the warning aren't there.

Not really.
Visit Security log (https://bitcointalk.org/seclog.php) and see how many users have changed/reset their password recently. How many of them have been accused of account changing hands?
As long as there's nothing suspicious (like posting style being changed), no one is accused of account changing hands, just because of the password being changed.

Yeah we can easily check under meta log for any user there whether he has waked up from inactivity or password reset that have data saved there for all the time.

Right many users change password for security reasons but that doesn't imply anything suspicious until they have waked up from long period of inactivity and start posting with changed style or something else that could create doubts on them.

I don't see anything bad in resetting a password, depending on the reason you are changing it. If you are changing your password and email because you have bought or hacked an account, that's the only time you will even be concerned about the tag "This user recently changed email or password." If it really is your account, you don't have anything to fear or feel disturbed about the bad impressions people will get because of the tag, because if you are asked to prove you are the real account owner, you still have the possible proof to let those who have doubts believe that it's your account.

It's not bad, but one of the signs of a hacked account. I changed my password once years ago since I register with a weak password not knowing that this is a rather "serious" forum. Not long after, people DMing me to confirm my identity. As long as you still can provide a signed message with the BTC address here (https://bitcointalk.org/index.php?topic=996318.0) (or a known public address) you'll be fine in most cases. If you haven't then do it.

Resetting your password isn't bad at all, but sometimes when you do not login for a long time and then out of sudden you change your passwords makes others think that your account might be hacked or sold. It's always better to reset the password only if you are active on forum for sometime because that would make others also believe that you are the real account holder and no one has gotten unwanted access to your account.

That was the general answer, and in my opinion one should not change his/her account's password unless it's necessary for the security purpose. I prefer to keep my old password because I think that I have created a strong password which should not be changed at all, but if I find that my password isn't strong enough then I would also consider changing it in future.

It's someone's own choice to change the password and I'm quite sure that no one would really care much if they found that someone has changed their password. However, it's necessary to be active on forum because if you change your password after a long time inactivity that could make other suspicious about your account's ownership.

If there is a very clear reason why you need to reset your account password, then do it. Changing passwords periodically is normal practice for the security of your account, but as long as you can still prove ownership of the account and there have been no changes in posting activity including language then I don't think people will accuse you of changing hands.

You can change your email too, sometimes it's needed, especially if so far your email is no longer safe from phishing attacks or something like that. A safe tip for keeping an account is to sign messages from bitcoin addresses you've used on forum.

There is nothing bad in resetting your password, and it can be good for security if done correctly.
Only way changing a password could be suspicious is for account that woke up after long inactivity, drastic changed of writing style, that could suggest account changed hands.

Diary?!  ::)
Why would you use diary when there are perfectly good open source password managers like KeePass?
Trusting your brain memory to remember all your passwords, or using one-for-all password is worst thing anyone can do.
Note that good password should ideally be long and randomly generated, that is not something you can remember or write easily.

Changing the password is the right of every user and it should not be taken as a negative thing. However, if any user changes his password, and then we see his posting habits changed considerably then there might be a possibility that the account changed hands or the account might be sold.

Anyways, for a genuine user, this may never be a problem as the original owner of the account can always sign a message with an old address and satisfy everyone that there is no change in the ownership of the account.

If you look at most of the reputable users they do change their passwords there is nothing wrong with changing one passwords but if changing it from the real owner to another person there are some criteria they may look at which, maybe new person change hand and possibly had recently used the account to apply for a loan while the real owner haven't used it for to apply for a loan, this shows a clear indication that such person bought the account for an evil acts. If DT member noticed such a thing they may give it a tag for changing password and taking loan, and before account could tagged they might asked you to signed an message from your old bitcoin wallet to show that such account are still operated by the original owner instead of second person who bought for evil purposes.

OP - You are free to change your email and password whenever you want. Neither of us need to ban you from doing so as it's totally up to you - but some suspicions are bound to be raised if the community notices glaring differences from your account including the way you post and such.

You may have some people in the community asking you to sign messages from bitcoin addresses if they suspect you - but basically that's not your problem especially if you can prove it. So the poin is; your account is your responsibility although you need to consider some community suggestions to avoid problems related to account reputation.

So I will answer [No] for your question. It's not a bad attempt.

It is never bad to change your password here, all sites always recommend that you change your password from time to time to protect your account some sites even ask you to change your password every year, what is not good to look at here is changing both password and email then there is a noticeable change of address and posting style and as long as you can confirm that you own the account through signing one or two of the address you staked or used here then there is no problem at all.
Just make your password as complicated as you can, here is a guide on how to create a strong password and remember it

How to Create a Strong Password (and Remember It) (https://www.howtogeek.com/195430/how-to-create-a-strong-password-and-remember-it/)


 

A strong password must be unique like you said and complex enough as well. Because it is complex, it's impossible to remember bunches of strong and unique passwords by your memory which can be lost by an accident or by a long time does not type the password manually.

Below is a guide for OP.

• [GUIDE] How to Create a Strong/Secure Password (https://bitcointalk.org/index.php?topic=5132378.0)

It really depends on how secure your password is - anywhere from twelve to twenty letters, numbers and characters might sound like overkill, but it will ensure you don't have to constantly change your password.  Write it down pen and paper, not in an online password vault - if you forget that password (or someone guesses it) then you loose ALL passwords.

As long as it is your account that you are changing the password,I don't see it as a problem. It is when you buy an account or hacked an account and change the password that it will be a big problem because the post quality will change and also the boards where you post will also change from the original owner. With those observation, it can be concluded that it isn't your account. To clear all futher doubt,you will be ask to sign a message and if you can't. You will face the consequences of your action.

Here is a statement that guarantees that one day you will lose your way here. As long as you take saving your data lightly, you should expect to either get hacked or simply lose confidence by regularly changing your passwords.
What's the problem with saving your passwords? Obviously, you won't be able to sign your Bitcoin address here since saving the seed phrase would be an unrealistic job for you. ::)
In addition, frequent password changes for users may not be a problem, but only for those who are sure that they will not confuse letters with numbers or even forget what password should be in their virtual save.
I would advise being more serious.

Don't worry I'll try to remember the next time. If I try hard enough I can surely remember it even though if may be a complex,long,confusing password. The main problem is no matter what I do, once someone becomes a custom ROM user, they get addict to test new ROMs. To do that you have to either backup your data or have another device which I don't. So every time I flash, I have to start from scratch like connecting to Wifi, relogin gmail and stuff, reinstalling all apps, and relogin again. If I were a Legendary like you surely I will be more serious in security. Since I'm a newbie I won't get much much attention. But thanks anyway.
I'll be serious

Use a password manager.

I use LastPass but their new rules about requiring you to pay to access it from multiple devices means its not suitable for free use anymore, so you should either use BitWarden, which has a mobile app and can even be self-hosted - or not, or use KeyPass XC which creates a vault on your computer as a file, to store your passwords and 2FA codes in (yes it can do that!)

Don't rely on the built-in browser password manager because as you said, it will be wiped out during the flashing.

But is this even safe and reliable? I don't want to save my passwords in a third party apps. Currently I don't own any secondary device, so won't be able to use the 2nd option.

ps: I don't know how self-hosting works. Never tried it.

Self-hosting is when you run the service on your own computer.

Bitwarden is open-source, so you can use a spare PC as a server and install it there. Or a virtual machine with Virtualbox or something with bridged networking (only if your PC has at least average amount of resources).

Keepass* XC (I misspelled it, it is not keypass) is also open-source but it's simply a stand-alone program that requires no server, you install it on your computer and it saves them in a file which you can protect with a password so that nobody else can open them.

Since Keepass only runs on a desktop, you should use an Android port of it such as this one: https://play.google.com/store/apps/details?id=keepass2android.keepass2android&hl=en&gl=US , although since you periodically wipe your device, you should at least get another secondary device to store your password file on (PC, tablet, or something else).

Password reset isn't in anyway a bad thing except there's something one is hiding from the public glare. We do it on other sites we visit whenever we suspect something fishy with our accounts. Once I get at OTP (I ain't talking about here) on any site I use but didn't ask for it, I know someone what's to access my account without my knowledge. The next thing I do is reset my password. It simply tells you that they've broken your password but couldn't get pass the 2FA on that account. If with time you feel your password has become too easy, it's better changing it. It doesn't mean it's a bought or compromised account.

You should make it a priority to get a second device then so you can separate your ROM duties from every other ones where you don't have to constantly reset to test stuff.

Solve the problem by writing out your username on a piece of paper, if you don't have a digital notebook.

It's not a wise thing to do, whether with BTT or any other site. The old fashioned way of paper and pen still remains the best method of saving passwords to the best of my perspicacity, anyway.

Since I will always test out new builds. I guess it's time to buy a new device. ;D
I guess, I got the answer to my question.


Nothing can beat the old fashioned ways. Yes sir, I will write it down in a dairy or notebook and store it securely where it will be safe.

You are free, and no one is against you changing your password because, as you indicated, it is for security reasons.

When an account activates and appears suspicious, or the manner of posting and interactions in the account changes, reputable forum users usually use the password changing time as evidence to show the user wrong or to protect the account from being utilised by a hacker.

I think this forum doesn't need people who don't take things serious especially when it comes of password saving and phrase backup because I can still believe that one day he would come crying for losing his entire asset.


If someone can't be concise with their information what more if they lost access to some few words in a form of letters as a phrase, btw changing password is not something that is bad but it should be that you don't regularly do it for a doing sake rather it should be that after some months maybe 5 months to 1 year interval you can decides to change your login details. However, you must stake a bitcoin wallet that will be as a backup to your account whenever unusual active is being found from your account DYING_S0UL.

I disagree, but of course it's good to have more users aware of how to secure passwords and everything that concerns the security of their assets. Forum are not only for smart or have a lot of knowledge, this's are online forum that can accommodate anyone regardless of knowledge and ability to understand something. Anyone has the potential to change for the better and vice versa, so we continue to find people with different levels of ability and understanding every day. Anyone can accidentally make a mistake, but they only get better when they want to fix it.

No argument mate
I said that in my own perception rather I didn't literally say that people like him won't belong here why, of course here is a free forum for everyone to associate with irrespective of how lowered they seems to be and here is an open place for everyone to make account and start their journey gradually without having misunderstanding the whole concept.

People who are dull brain takes time to learn and they are not in a hurry for anything but to op with what he is saying this crystal shows that at any point he will raise alarm for misplacement of funds or to whatever since he can barely remember important things and we should try to know the most important things just like me, when it comes of finance I mean personal money I don't take it for joke especially when it involves securing one details or password I don't mind going to the deepest part to hide and protect it to make sure my funds are safe and secured.

Sorry you mean the same forum that doesn't even verify your information when you register, the forum is one of the platforms that I have registered and noticed they don't give a fuck about anything you do. The forum is opened for everyone and you don't have to be some gurus or over serious person before you think you can register on the forum. The forum might even love the inexperienced users more so it can build them to becoming better cryptopreneurs. Just for context, my knowledge on Bitcoin isn't the same as of when I joined the forum, I have understood something's better that I won't have understood if I felt the forum only needed serious user and I didn't register.

As for the change of password discussion, there's nothing wrong in that and no body will hold you accountable unless your activities shows signs of been suspicious like the account is hacked or has changed hands due to it been sold for signature earnings purposes. Changing of password frequently Is a good security measures that we should practice because our system can be compromised of malware that steals your private information without us knowing, just make sure you can prove ownership of the account when your ownership of the account is been doubted.

The suggestion to be serious comes from good advice, so that one day such a situation does not happen.
Imagine that the OP visits a forum regularly, for which he forgot the password for the hundredth time, but he is successful on the forum, and one day he increased his rank. But suddenly something went wrong, and he could not log into his account. And he has no password or recovery mail.


I remembered this story, and it seems to me that the OP may also face this situation, only much earlier.
That is why the suggestion to be more careful, namely more serious, looks like the right advice; it is in the interests of the OP.
By and large, everyone else does not care about his future, and this applies not only to life on the forum but in general to all of life. He alone is the master of his future.

I think you are misunderstanding what "smartgold" meant when she said the forum not meant for serious minded individual, because of anything anybody should never forget on this forum is his/her password & username, which judging from O.P's statement, this is not the first time, nor second time, or third time he/she has forgotten the password & kept resetting it without having a rethink to write it down on a piece of paper for future reference, which is the main reason why "Cai Lun" (https://www.google.com/search?q=who+invented+paper+and+pen+&client=ms-android-transsion&ei=TVHTZJDUJv-chbIPkLePmAE&oq=who+invented+paper+and+pen+&gs_lp=EhNtb2JpbGUtZ3dzLXdpei1zZXJwIht3aG8gaW52ZW50ZWQgcGFwZXIgYW5kIHBlbiAyBRAhGKABMgUQIRigATIIECEYFhgeGB0yCBAhGBYYHhgdMggQIRgWGB4YHTIIECEYFhgeGB0yCBAhGBYYHhgdMggQIRgWGB4YHUisjwFQhCRY_4UBcAF4AJABAJgB_gKgAbYyqgEGMi0yMS40uAEDyAEA-AEBwgIKEAAYRxjWBBiwA8ICBhAAGAcYHsICCBAAGAgYBxgewgIIEAAYigUYhgPCAgUQABiiBMICBBAhGArCAggQIRigARjDBMICBxAhGKABGAriAwQYACBBiAYBkAYI&sclient=mobile-gws-wiz-serp) a Chinese royal court official invented paper & pen 2000 years ago, as a medium for future reference in times of need, which O.P failed to adopt. So i think what O.P need to do now is pen down on a piece of paper whatever password or username he uses, and stop having the mindset of resetting it everytime he forget.

I think you just automatically explained all mean in that context because looking deep to what op is saying, there is no sense having to keep resetting his account or coming later end to exclaim for his or her nasty and silly act. Well there is no restrictions over here that limits such an incoherent words and statements, that is if actually he could be heard again or given attention as I believe this thread would be active for references if there are issues to come.



Absolutely this was my point as well.
At this point would he keep bugging Theymos for his action to restore back his account or call on mod and admin to look into his case. No because he was careless and not security conscious. 

But what reason would that be that you resort to changing passwords? I mean, you can just tick the Always Logged In in your browser so you don't have to relog. I don't know of any reason that someone will hack your forum account even if it makes a lot of money from signature campaigns, you can always report that you're account's stolen.

Highly circumstantial evidence though, what if they've forgotten their password or they've updated their password scheme but that's an unlikely thing to happen. Most password changes are almost always suspicious given how account selling is a thing here. Nothing wrong with changing password, as long as you can prove it's you by signing your PGP key, this one pretty much helps you avoid the suspicion altogether.

You should know how to properly protect your account, and one way is by changing your password regularly and backup securely.
Storing your password online (eg at Google) is too risky for your security. It is not recommended for anyone concerned with security and privacy although you can login easily without bothering.

Imagine if you never backup your password, but you saved them in your browser, but suddenly you lost your device or it broke for something, how can you recover your account?

Ain’t nothing bad about having to change your password from time to time. In fact, it’s something you should do occasionally should you have any sense of insecurity and even when you don’t, it ain’t a bad idea and the forum has made provisions for change of passwords. Many experienced users still do change their password and in the event that you get investigated due to these changes, don’t feel so bad. It’s just a verification if it were to be you and for the rest of the forum to be safe about the account.

The only issue that could follow regular changing of password is you. You might forget or mix things up and that could be the end of it. Good enough, a signed address could aid you in recovery as concerns the forum so, you might just do that. Writing your passwords anywhere else, in a diary or on an online note pad have its measure of risk. Be guided!

My guy, I have so much going on with my life right now and changing passwords or using different passwords for different accounts in different platforms are the last thing in my mind. It's only a risk if you're handling sensitive information that can jeopardize a lot of people which is unlikely for an individual and most hackers don't really target individuals frequently. Using the same password would probably be the solution for when you lose your device, imagine scrambling through all the passwords you've used and end up not knowing which one you've used.

You may change your account password at any time at your own discretion.  Even if you change your account password every day, it is not a problem because it is your personal safety. If you are the actual owner of that account then changing the password is nothing to fear for you.  Changing the account password is feared by those who hack the account or try to use it by buying the account.  Because there are many people in this forum who check the account of changed password many times. so if the password of a hacked account or purchased account is changed and since then a different user starts using that account then that account is often reported due to which the account may get red tag. So I don't think changing your personal account password will cause any problem

Definitely you can reset your password
When you forget your account password it is normal that you need to reset the password via email.  All platforms provide this opportunity so why is it can be bad for bitcointalk? You can change your personal password again and again for account security. it's not bad.

So carry on...
Chears 🤘

It is a highly valuable platform, but not to people that do not know about it. A regular cybercriminal or criminal who comes across your bitcointalk account password will not be interested in it if they do not know what it is, and if your account is low profiled especially.

You forget easily like you have identified, not keeping your password anywhere is a terrible choice to make. If you cannot recover it any day things get mixed up in your head, your account is gone.

Write your password down in your dairy in a format that nobody will be able to decipher. Just devise a means that only you know.

It's never a wrong Choice to make... I've done mine once though; only that you gotta be careful how frequently that happens... That's not just gonna raise suspicions but it'll also make your account easily cracked at the time... except and otherwise you had your address staked on that thread mentioned above, then you can put up claims to it.
Some peeps get too scared to update 'em passphrases thinking they'll be held responsible for Thier actions - maybe someone's gonna pop up somewhere and begin to suggest the account's been hacked and so on..well, that's not true.

Sandra 🧑‍🦰

Overall you have to think about what's best for your account and resetting your password is your safety net but even if you set it a hundred times if you have a weak password resetting will not work, if your account here is valuable use a very strong password that even who knows you can crack it, never use a password that is associated for you like your birthdate and of course staking your address is a must, it's our unique recovery method here this is Bitcoin forum so we have our own way of recovery instead of using 2FA or any other means.

That's a little bit offensive, isn't it? A lot of people learnt that they have to take their privacy and security more seriously after visiting this forum and forum owner has said many times that this forum will always remain as free and welcoming as possible.

Actually not offensive but it show incapability of op not to have jut down his details, yes we believe here is a free place that teaches people lot of things but that's doesn't mean he should be that lose or open to keep misplacing his password or regularly resetting profile. Does this shows a responsibleness or someone who wouldn't come in anytime soon to exclaimed about any fault some days?
I believe he has read lots of post across the forum that keeps preaching about security and how to protect their account against hack so why on earth would he keep violating those rules so why then is still accessing this forum haven known that after some moments he would reset again.

As funny as that sounds, it's the truth. There was a time I spent some hours in contemplation on that. Even a common thing as a 2FA or email verification when one logs in, the forum doesn't see any reason to implement any. I mean, that can further strengthen accounts security.

I won't be surprised if that's the mission statement of this forum. I've come to realize that theymos doesn't like anything that will stand as encumbrances to users here. He delays in implementing anything he knows will put a lot of users in discomfort, especially when such is called for by veteran users. I think having more users onboard makes much sense to him than policing harshly those already here.

This is a security measure because many people that have lost there accounts here and finally come to the forum to complained have noticed that there accounts was compromised by changing there password many times without there noticed. Knowing how many times an account password was changed is a security measure that help us to know whether a current account that started being very active is compromised or not.

This measure had helped a lot of people to know that a particular account is compromised or not. If the setting or changing or resetting account is not there, many will lost there accounts and not able to get there accounts back because they can't remember there password. We can either reset out account through the forum or through our email.

But sorry to say, if implement any security policy would be a barrier to him why then do we have merits system?
Because from my own point of reasoning security policies can be liken to be as merits restrictions because, what does it mean for someone to be here without having a total freedom of ranking, same it's to security measures because I don't see any reason for one to be here without a proper security protections. If so the forum would had been that open for everyone to rank without any restrictions, anyway not that I am trying to deviate from the main purpose of this topic, but we must know is something that is called for.

I don't think that is a discomfort even as much we are trying to make the forum easily accessible Theymos should also try to implement some security standard whereby it could be very hard for an account to be hacked or stolen from the original owner, I know how many countless issues that talks about account bridging while some complained of someone using their account to apply for a loan they request for, this looks very crazy, like, let it be that before your account could be access from another advice either you must provide OTP from email associated with the account or trying to use 2fa just as you said earlier I think this could helps in reshaping the entire system than merits system. But however, meriting is also another pretty cool way to avert shitposters and spammers.

I do not personally think password change is any red flag as it's one of recommended security practices.

But it is true that when some account has it's password changed recently/frequently, it might get under radar of people who check for hacked/sold accounts, so they can reward that account with proper trust rating.


Use offline password manager. I myself use password safe [1] on my android. Encrypt it and make backups regularly, so even if someone somehow gets access to the cloud file, he can't have access to the data without knowing the password.

Stake your Bitcoin address as an alternative way to secure your account [2].

 

---

[1] Password Safe (https://play.google.com/store/apps/details?id=com.reneph.passwordsafe)

[2] Re: Stake your Bitcoin address here (https://bitcointalk.org/index.php?topic=996318.0)

We should first ask ourselves if there's a need for resetting the password in the first place, someone like me will always set the option for always stayed logged in on my device as long as i know am the only one that always have access to my device, resetting password is a choice to do and if you know doing that will complicate things more then you shouldn't, note that while resetting your password, there will be a request for confirmation of your email and I code will be sent there for verification, this may be a bad omen for those using fake email address or yet to sign a message on bitcointalk.

The point of the forum is just to hangout with like-minded individuals, it's just an account (nothing special) we shouldn't be giving too much value to it with all the security measures we're requesting for. Merit isn't a security measure. There wasn't any merit feature before, it was just implemented 5 years back when the industry begin to gain more attention and the forum began receiving more spammers in their numbers farming the forum for bounty/signature and it resulted to much spam. The merit system is needed but the other security features isn't. No big deal in forgetting your password and requesting for a new one. The procedure is automatic and mightn't need any moderators intervention when you have a valid working email so no big deal there.


That's my point exactly, like the forum was created with an opened and free minded approach. Satoshi/theymos didn't want to create any discomfort with registration and using the forum but we're the ones complicating things with all our unofficial rules and regulations. What we should be concentrating our security awareness on is our Bitcoin wallet and not the forum but I understand SmartGold01 advice and acknowledge that she meant no harm but it's left for each of us to decide how we want to keep our account safe and bare the consequences of our actions. OP resetting account password on and off the forum isn't a crime or bad, it's even recommended to keep your accounts more secure but make sure you can defend yourself properly without any doubt when your attention is called upon.

Well, I'm of the opinion that he should create it now, seeing the level of complaints of account hacks and all that. A 2FA should help buffer the security of accounts here. I know it takes time to recover any hacked account even when the owner has a signed message from a wallet they've staked here. During that period of wait, the user would've lost their slot in a campaign. That's me assuming they were in a campaign before that hack happened. Just like posting here and ranking up was without hassles in the past until theymos implemented the merit system to control spamming. He can also implement 2FA on accounts. After all, change is the only constant thing in life. BTW, we've seen less serious business minded sites  implement the 2FA on their platforms. So, it shouldn't be a big deal for theymos to implement. He can also delegate it to programmers here and I'm sure someone will pick up the challenge.

Changing your account password is not bad because it is for your safety and security but once your notion for changing it is not in line with scam leading to account purchase or hacking you have no reason to be worried unless there is something hiden which we don't know but will eventually be seen once there is any visible evidence backing it up. I remember changing my password once after clinking to an unknown link, I had to quickly change my password to avoid giving hackers access to my account and since then I didn't receive any feedback or claims by any one in respect to that.

I mean changing your password was actually a good thing right? For security some are going to recommend changing passwords probably at some point could be every 6months or something like that. So changing it wasn't bad at all, it's actually a good thing right the thing here is there are times when members could easily notice a change of posting style or somehow how members make their posts. When some members change their password and then members here in the forum notice the change of posting style like it was completely different from his or her old post there was a possibility that the account was hacked, I mean members are obviously going to assume that it is a hacked account or sold account and that just means that members might tag your account as hacked.

It could easily be solved if you sign a message if you stake your Bitcoin address here in the forum you could easily prove to everyone here that you're the main owner of the account if you do that. So make sure to stake your Bitcoin address here so that if your account gets hacked you could easily recover your account.

If you are to read the rules governing the btt forum. There is no way it is stated that changing your account password is bad. Other online platform allows such a thing, and the btt forum won't be an exception to that since the account owner is the one in control of the account.

The time one should be worried about a change of password is when he is not the rightful owner of the account and the posting style of the account has changed. That's when bpip will come to play to notify the forum members that there was a time a change of password was made on the account.

Every online platform allows a change of password to be made at any time, and the btt forum won't act strictly to that since the account owner is the one in control of the account.

 

For me There are three reasons why users change their passwords and first of that is they want to secure their account so they will change their passwords, second is they change their password it because they know that there's a suspicious link they click or suspicious message they receive and lastly is that their account was hack so the hacker change the password so that the real owner can not recover their accounts.

changing passwords can be done periodically within a certain period. it's like a security we create ourselves. especially if we access the forum using a device that is used by several people. such as borrowing or renting a laptop or PC.
you can also try to use this method.

in case of account hacking, as long as you sign the message with your Bitcoin address on the forum. and you have email access when you sign up for an account. you can recover your account.

there is nothing wrong with changing passwords, although there will be a possibility that the account is indicated to have changed hands.

I will voice the opposite opinion that changing the password is good, which means "Is resetting a BTT account password bad good". It is advisable to periodically change the password in order to ensure the security of your account. Of course, we are talking about changing the password by the real owner of the account, and not by intruders.

Technology is rapidly developing and therefore, it may soon happen that by changing the style of posting an account on the forum it will not be possible to determine the change in the owner of the account. All account posts are in the public domain and if you use AI to analyze these posts and generate new ones with it, it will probably not be easy to detect style changes.

The only caveat is that the forum is not able to determine the real owner of the account, and for this, the forum participants found a solution with the publication of their bitcoin addresses for subsequent confirmation of the right to own the account using signed messages.