Changing alias/ID at blockchain.info from login attempt?

[DaaBoss]

I received an email that appears that someone "bad" tried to log into my account, since I know I didn't.  However, the email is not at all clear to a newbie, nor is one of the remedies.  Here's the message, and my questions tha follow:

An attempt to login to your blockchain.info wallet was made from an unknown browser. Please confirm the following details are correct:

Time: 2013-07-32 13:46:26
IP Address: 192.? ? ?.? ? ?.42 (United States)
User Agent: Mozilla/5.0
 
If the above details are correct, please use the following login link:

htt ps://blockchain.info/wallet/ea;ld;alsdkjf;ajdkjdkfja

If this login attempt was made by you this email can be safely ignored however you may wish to change your wallet alias.
Your wallet identifier is: sa;kajf;leiieafae 

PART 1 >> --- Obviously, since it wasn't me, I didn't click on it. But,

            "If this login attempt WAS made by you this email can be safely ignored ... "

Since this was NOT me, I should NOT ignore it.  And... do what??

            "... however you may wish to change your wallet alias."

It seems to indicate that even if it was me, that I should consider changing my "alias".  Since it was not me, I'd have to assume it is even more important to do so.

So, I went to the site and searched all over, including all the FAQs and help, but found zero reference to any ability to change the alias, or advice on what the email advisory was really suggesting that I do.  I did learn that  "alias" is identical to "wallet identifier" and identical to "login name" to the wallet site, which was not clear.

SO, HOW can I do this?  Create a new account?

PART 2 >> --- Later, I got another email generated directly by my browser.

SO, WHY would it suggest I should change my alias?  Did I trigger a risk itself, and or an indication there was now a risk?

------  Hopefully someone more senior can post this to the BlockChain.info forum so they could improve their messages. 

(Technology Rant:) 
In general, newbies need an easy way to convey what confuses them: What the missing pieces of context are they require to take action?  Those that create the UI's and help docs already have that missing context, and so can't detect or provide what context is missing.  For instance, on any given website, it is seldom clear what to use for the "login name".  Sometimes it needs an "email address", the first part of an email address, (think Google Apps), sometimes a "casual username", and others, a "dedicated username" that differs from the public "handle" or "username".  Obviously jargon is often required, but the definitions must be easily visible with wither flyovers and/or links, along with ALL they synonyms. 

[bitcoin44me]

That's just an automatic email. If you tried to login, click on the link (if it's legit), and access your account.
If you did nothing, just ignore it.


This is basic. Is it your first day on internet?

[grandinvestments]

It sounds like this is the kind of email you might get if you . . .

. . . logged into your wallet from one browser (say, Firefox) and then later from another (say, Opera) . . .

. . . or . . .

. . . logged in from one IP (say, at home) and then later from another (say, in a coffee shop).

Or maybe it takes a combination of differing browser/IP to trigger that mail.  Not sure how blockchain.info does things.

Is that a possibility?

[grandinvestments]

Also, I also understand your concern about not wanting to get hacked — technically, cracked, but it seems like very few people make that distinction these days — or phished.

Does the blockchain email seem legit?  Is the log-in link the correct one for your wallet?  When you hover over it, does the link point to what the underlined text is?

Here's some more info on avoiding phishing and such:

http://www.bu.edu/infosec/howtos/how-to-detect-phishing/

I don't put the kind of trust in Google and Chrome that lifehacker does, but here's more info:

http://lifehacker.com/5873050/how-to-boost-your-phishing-scam-detection-skills

[DaaBoss]

Thanks for your help.  But in this case, yes, I do know the email was legit, and it was triggered by someone trying to log into my account from an IP that was certainly not mine.  I will go back and try to discover what part of the world the IP was from, assuming it wasn't faked or multi-proxied.   The second email was also legit and was, as expected, from another browser session, and did indeed log me into my account (again).

I suspect that deciphering the specific language they used, which is still confusing, will have to be reposted to the proper forum by someone with enough stripes.  The reason for my posting was not so much that I needed to know, but that so Blockchain could improve their product.  Without someone informing them, I'm sure what the email said made perfect sense to them, but not me, and I suspect most users. 

The email did seem to indicate that I should be able to change my "wallet alias", which seems to be my "account login name", which very few sites will allow you to change.  So, I guess they are suggesting that if I'm concerned, I should create a new account and transfer balances to the new account?  It doesn't make any sense if that is so.  If that is the advice they intended, then say, "if ... you can create a new account, transfer your balances, and abandon your old account."

[[ .. For bitcoin44me: Of course the email was triggered by an "event", and is most often benign, or a phishing attempt.  However at times, these "events" are the only clues that any user has. Personally, I never want my users to ignore unexpected warnings, nor IMO, should you encourage silence from the uninformed.

And, yes, I've been a CEO and a CTO for 30 years now and have produced software used by millions, some of which might even be be running on your PC, and responsible for some very critical but invisible processes.  That said, I'm closer than ever to becoming a complete technology idiot, since I have yet to learn at the exponential growth rate of information.  If you know how I can accomplish this feat, please let me know.  ]]   

[tulasacra]

received the same email and have the same questions as the OP.
this needs clarification 

[ChrisJ]

Bump. I just got one of these emails, this issue needs addressing. I will contact their support and recommend anyone else to do the same.