Message To Beginners: Do not use Secret Question to reset account - It locks it

[btcdevil]

one of my friend account got hacked and the hacker changed the password and email id ,  please tell me how to recover that account , what is the procedure to get back that account, he used the wallet address, so he cannot get signature from them.

[notlist3d]

one of my friend account got hacked and the hacker changed the password and email id ,  please tell me how to recover that account , what is the procedure to get back that account, he used the wallet address, so he cannot get signature from them.

He needs to post in meta with all the details.   I suggest him starting a account just to post in meta and him to explain it.

I would not try to do it as a "friend" have it come from the source.

[Snorek]

Secret Question Recovery is like Trojan Horse of Bitcointal. Once you use it there is usually no way back, as I heard that theymos or badbear are usually busy to the point that they don't unlock low level member accounts.

[brianlee01]

I'm not using Secret Question since i know if use that the account will locked. Also it will be hard to Unlock it because theymos and Badbear is really busy. And i see many who get that problem wait for him to unlock it. My suggest to everyone just use your email to reset your password.
Thank's

[hasiramasenju]

since the first time i had register in this site i'm never use a Secret Question because I was afraid will forget the answers

and my account will be locked forever

[notlist3d]

Bumping incase anyone new now and they have not read this.  Resetting your password via secret question does still indeed lock the account. 

Saw one in meta so thought I would give this a bump for those new, and if some missed it.

[Snorek]

Bumping incase anyone new now and they have not read this.  Resetting your password via secret question does still indeed lock the account. 

Saw one in meta so thought I would give this a bump for those new, and if some missed it.

It is sad that we must resort to measures like 'bumping' thread with the info about disruptive functionality of bitcointalk. This issue is known for a long time, how much time will pass until it will be fixed?
I imagine it is not something impossible hard to fix, right?

[notlist3d]

Bumping incase anyone new now and they have not read this.  Resetting your password via secret question does still indeed lock the account. 

Saw one in meta so thought I would give this a bump for those new, and if some missed it.

It is sad that we must resort to measures like 'bumping' thread with the info about disruptive functionality of bitcointalk. This issue is known for a long time, how much time will pass until it will be fixed?
I imagine it is not something impossible hard to fix, right?

The good news is it's slowed down from what it was, so it is being passed on the knowledge it still happens.   The sad thing is it still happens then people have to prove they own account, and it can take time.

A fix such as removing it would be great long term. This just will let a few new people to see it but will in no way stop it like removal would.

[buddycool]

I buyed this account from a friend.  I was about to set the security question,  thank god i didn't. . My goodness that I found your post, thanjs a lot

[notlist3d]

Try to bump this every once in a while.  It is still happening https://bitcointalk.org/index.php?topic=1377943.0

DO NOT reset via secret question it locks your account. 

[notlist3d]

Been half a month it still is happening - https://bitcointalk.org/index.php?topic=1398722.0

The good news is there is a good reduction of amount since when I started this thread, so it is less of a problem.  Bad thing is it seems a few still don't know and it's a pain to get unlocked after.

[X-ray]

Well it would be great if there is a warning pinned on profiles that if they reset password using the secret word then their accounts will be locked. Not everyone sees this thread actually and unfortunately it hardly gets any attention once this got covered with other threads in here in the Begginers and help section.

[notlist3d]

Well it would be great if there is a warning pinned on profiles that if they reset password using the secret word then their accounts will be locked. Not everyone sees this thread actually and unfortunately it hardly gets any attention once this got covered with other threads in here in the Begginers and help section.

It would be nice but unfortunately that has not been implemented.   This thread was to show newer users, as it is good info to know and I did not think new users were reading meta.

I wish I could take credit of everyone seeing it but most have seen it in Meta.  If you don't read meta I suggest you do as there truly is lots of good info in it.  I read it a lot more then I post in it.   But people who read Meta have known about this a long time.

And really it has slowed down quite a bit which is good.  So even though there is no message the decrease of people getting locked out due to it is a good thing.

[Duomo]

I never knew that using a secret question to reset an account would lock your account the few years I have been here. I have never set a secret questions and it seems something like this should of been addressed earlier. My hope is that bitcointalk accounts get 2FA authentication because it would be impossible to log into a bitcointalk account with the generated token from the authenticator. This seems like a such a hassle. 

[Slowturtleinc]

Stopped using secret questions when I forgot a password for a gambling site and had to call them up,30 minutes of me guessing on the line she says to me "Whats you wifes name" and I did not have a wife. Trolled myself back when I signed up for the account and put that down for some reason or another. So yeah stupid story about secret questions sucking major ass imo.

[PHS]

Bumping as it's still happening so I figure some might need to read this - https://bitcointalk.org/index.php?topic=1214476.0

Do not use secret question to reset your account password.  I would suggest removing it if you have one.  It's a pain and possible waiting time to get account back.

Thanks for the info dude
Is admin are moving to fix this?

[X-ray]

Stopped using secret questions when I forgot a password for a gambling site and had to call them up,30 minutes of me guessing on the line she says to me "Whats you wifes name" and I did not have a wife. Trolled myself back when I signed up for the account and put that down for some reason or another. So yeah stupid story about secret questions sucking major ass imo.

It's the secret question here in the forum not in your gambling site. You clearly didn't read the thread and you are spamming your sig here. Next time dude , again my favorite advice, learnto read. No one cares about your story here. This is a serious security matter in everyones bitcointalk account.

[sallymeeh27]

This is actually good for informing us to do so, it was a big help for others not to do so. But I was thinking mostly of the security questions use are secretly questions why do not allow to use this for I believe that this is the safest one for each and everyone..

[Iseecookies]

@OP
This is good to know,I routinely think of using this option on this site. Only reason I do not is there seem to be a lot of hacked accounts
and secret questions tend to be similar accross the web or you are tempted to use the same one.

Stopped using secret questions when I forgot a password for a gambling site and had to call them up,30 minutes of me guessing on the line she says to me "Whats you wifes name" and I did not have a wife. Trolled myself back when I signed up for the account and put that down for some reason or another. So yeah stupid story about secret questions sucking major ass imo.

It's the secret question here in the forum not in your gambling site. You clearly didn't read the thread and you are spamming your sig here. Next time dude , again my favorite advice, learnto read. No one cares about your story here. This is a serious security matter in everyones bitcointalk account.

See nothing wrong with his post since he is stating why he does not use the function,you on the other hand.

[notlist3d]

Bumping as it's still happening so I figure some might need to read this - https://bitcointalk.org/index.php?topic=1214476.0

Do not use secret question to reset your account password.  I would suggest removing it if you have one.  It's a pain and possible waiting time to get account back.

Thanks for the info dude
Is admin are moving to fix this?

Do not believe so.  I would delete it personally if you have one on account.  I believe there was at least 1 compromise where answers could have been compromised.... so can't really turn it on or it risks accounts with it being taken by "bad guys'.

And I could be wrong on that but i had it in my head started after a compromise of DB.