Special guide to keep your forum account safe forever (Must Read)

[TalkStar]

Hello guys,

Today i am going to share some important things which will help you guys to recover your hacked account easily in the future. Many topics already been posted and discussed on the forum about hacked account recovery. I don't want to replay them here. But after our admin theymos confirmation about hacked account recovery system i feel its really important to follow some special guide to keep our account safe.

Follow the link to know details about account recovery;
https://bitcointalk.org/index.php?topic=5089777.0

It is to notify that in the new account recovery system theymos required some important info to start the recovery process.

To recover a hacked account owner must have to provide several things. Account owner must have to send an Email to forum recovery email from his/her registered Email address including his/her username, details of hacking. Btc signature message also required too.

How to sign a message ?
https://bitcointalk.org/index.php?topic=990345.0

Sign message here;
https://bitcointalk.org/index.php?topic=996318.0

In every section of recovery we have to send Email from our registered email address by which we opened our forum account. That means if anyone already changed their Email address he/she have to send mail from their previous Email Address. New email will not be accepted in account recovery system.

What we need to do ?

We have to understand that usually hacker try to change users email address and password after hacking. For this reason real users can't able to log in to their account. But still its possible to get back your hacked account by using new account recovery system of the forum.

Special guide to recover account in future:

Please write your Registered Email address with login details on a hard paper and keep it on a safe place.

You can find more account security tips here: https://bitcointalk.org/index.php?topic=4920096.0

Finally i think its clear to everyone that if you forgot or lost your registered email login details than you will not be able to recover your account anymore.

[JeromeTash]

I also made a guide of how I recovered my account last month even with only my original email ( i had not yet staked my bitcoin address at the time of the hack)
I put up a detailed account of the steps I took to recover it in this thread.
Hacked accounts recovery team is doing great, Don't just give up yet!

It could help someone.

[Bitze]

This is a very important information but I think there are already some threads on the topic.
That it will be possible in the future to get the account back via the original mail address and not only via deposited btc address will probably save some users

[logfiles]

That it will be possible in the future to get the account back via the original mail address and not only via deposited btc address will probably save some users

Were already in the "future" 
By the way account recovery through original email has already been implemented. Some people have already recovered theirs.

[Jet Cash]

Whilst this information is useful, the most important thing is to keep you computer safe from hackers. If they can gain access to your Bitcoin Talk account, what else can they take over.

Make sure you have anti-virus active.
Don't use simple, or repeated passwords.
Be aware of phishing techniques, and don't click on links without prior investigation.
Probably the most important of all - don't use a Windows based machine for anything associated with your finances.

[TalkStar]

Were already in the "future" 
By the way account recovery through original email has already been implemented. Some people have already recovered theirs. So its better to store it on hardpaper for emergency need.

Yeah recovery system helping some users to get their account back. I wish our users will be much Careful about their registered Email address. For successful recovery its important to contact from their Email.

Whilst this information is useful, the most important thing is to keep you computer safe from hackers. If they can gain access to your Bitcoin Talk account, what else can they take over.

Make sure you have anti-virus active.
Don't use simple, or repeated passwords.
Be aware of phishing techniques, and don't click on links without prior investigation.
Probably the most important of all - don't use a Windows based machine for anything associated with your finances.

 
I will suggest to our new users to follow those instruction to make their account secure. Definitely these gonna help in many ways.

[vagrom]

I don't know if the forum can take some security measures. For example, changing an email address takes five days to change. At the same time, the change information will be sent to the mailbox. This should increase the possibility of anti-theft to some extent.

[kingpin4321]

You effort is very much appreciated by me this can sure help protect once account especially that of the newbies.
But I would really love to see some day when 2fa can work on bitcoin talk forum account

[logfiles]

I don't know if the forum can take some security measures. For example, changing an email address takes five days to change. At the same time, the change information will be sent to the mailbox. This should increase the possibility of anti-theft to some extent.

Am also really in for the email verification thing... Especially with password change. This would not only cut down on the number of stolen accounts as the attacker would not have access to the account's email in most cases but also help reduce account farming and sales. This is a major problem that has been ignored for a while.
Maybe there is something being worked on at the moment.

But I would really love to see some day when 2fa can work on bitcoin talk forum account

2FA has been on plans to be implemented on the new forum software that is being developed. We can only wait for that day.

[jademaxsuy]

If there's a record about what email you have used when the account is registered then it can be used to compare the details you have used and the details your provide might be enough to prove that it is your account and you are the one who register the account.

[LTU_btc]

OP, good suggestions, but still, it doesn't guarantee that your account eill be stay safe forever. There was cases when users who used most of avsilable protection methods and still lost their accounts.
Few my suggestions - don't visit phishing websites, it's one of main reasons of account hacks. It would be best to bookmark Bitcointalk in your browser. Always use strong and unique passwords. It's also very important to protect your email with 2FA. Without access to email hacker won't be able to use your account. If you will lose access to yourvemail it will be impossible to recover account.

I don't know if the forum can take some security measures. For example, changing an email address takes five days to change. At the same time, the change information will be sent to the mailbox. This should increase the possibility of anti-theft to some extent.

Email verification for password changes has been proposed in past and it would help to reduce number of hacked accounts, but it looks that this feature won't be implemented soon.

You effort is very much appreciated by me this can sure help protect once account especially that of the newbies.
But I would really love to see some day when 2fa can work on bitcoin talk forum account

In current forum version 2FA won't be added. There will be some kind of 2FA on new forum software, but the main question - when it will be released? Maybe after 1, 2, 5 years, we are already waiting for it for very long time.

[TalkStar]

OP, good suggestions, but still, it doesn't guarantee that your account eill be stay safe forever. There was cases when users who used most of avsilable protection methods and still lost their accounts.
Few my suggestions - don't visit phishing websites, it's one of main reasons of account hacks. It would be best to bookmark Bitcointalk in your browser. Always use strong and unique passwords. It's also very important to protect your email with 2FA. Without access to email hacker won't be able to use your account. If you will lose access to yourvemail it will be impossible to recover account.

In future i hope new forum software will be updated with 2FA system. But untill that time registered Email account is vital for account recovery. I hope Every users of bitcointalk will be aware of secure their Email first.

[DdmrDdmr]

<...>

Talks on 2FA to protect user accounts have been going on for years it seems. I opened a thread on the matter at some point.

What I stumbled upon today was interesting: A topic from June 2015 (see 2FA for more security in bitcointalk forum ) which leads to a document from back in 2014 with some of the initial requirements for the new forum software: https://docs.google.com/document/d/1bHlm4NQkSzaBTT5tLIqQBmV92wSsbdOX5r-dRR9Dgg0/edit. There is a chapter there called "Fancy Authentification" which does not explicitally mention 2FA, but rather a whole bunch of alternatives and with possible different permitions on the forum in accordance to the selected alternative.

in somnis veritas …

[leowonderful]

I typically change my password every few months to ensure that the chances of my account being compromised are low. Signing and staking your address is indeed important, but you should also take additional security precautions on top of that to ensure you don't have to start the account recovery process in the first place. Some people also only use their BCT accounts on one or two trusted computers and have other accounts for use on insecure computers.

Also make sure you use a decently long (12+ characters) password that you don't use for anywhere else on the net.

[HODL2090]

...

Protecting your email is very important as that provides an added layer of security to all your accounts on the forum and exchanges linked to your email address.
With access to the registered email you can also lock your account and prevent damage if it ends up in the hands of hackers, while you begin the recovery process.
2FA on bitcointalk does not appear to be in the works yet, although it has been discussed multiple times.

[TalkStar]

I typically change my password every few months to ensure that the chances of my account being compromised are low. Signing and staking your address is indeed important, but you should also take additional security precautions on top of that to ensure you don't have to start the account recovery process in the first place. Some people also only use their BCT accounts on one or two trusted computers and have other accounts for use on insecure computers.

Also make sure you use a decently long (12+ characters) password that you don't use for anywhere else on the net.

Yeah very impressive tricks you shared  to save users account from hackers. Every user have their own technique to secure their account. I would like to add some more like,

 1. Check address bar before visiting a site. Mostly SSL inactive sites can stole your identity easily. So check is it green or red marked website.

2. Use 2FA security system with your Email. Usually hacker target users Email first. Where most of the people don't bother about their email security. So its important to make the Email secure first.

3. Try to avoid Phishing site link. Under ranked porn sites usually deliver visitor to phishing sites.

4. Try to use complex password combination for your acoount. Usually some users use common password everywhere. I would not recommend it.
 

[elda34b]

2. Use 2FA security system with your Email. Usually hacker target users Email first. Where most of the people don't bother about their email security. So its important to make the Email secure first.

Any recommendation for 2fA email? I use protonmail, but they don't have any 2fa, only account password and inbox password. Tutanota might be an alternative but they're slow sometimes.

4. Try to use complex password combination for your acoount. Usually some users use common password everywhere. I would not recommend it. 

Use KeePass or LastPass which can save and generate random password.

[TalkStar]

Any recommendation for 2fA email? I use protonmail, but they don't have any 2fa, only account password and inbox password. Tutanota might be an alternative but they're slow sometimes.

Honestly hackers target users email first. Because  its the entrance of any account. You may heard this kind of email hacking news couple of times. So IMO its the best idea to secure your email first. That's why i think it will be safer for  you to choose 2fa enable email services in the future.

Use KeePass or LastPass which can save and generate random password.

Yeah thats another way to have strong password. But i think its better to use your own complex one

[akihikohideaki]

Hello guys,
Finally i think its clear to everyone that if you forgot or lost your registered Email login details you will not be able to recover your account anymore.

Thank you, your writing always reminds me of the importance of account security. Based on that, I often change passwords regularly, especially imail. And this is my step to minimize account theft besides adding recovery accounts and cellphone numbers because imail is key in the last step as account recovery.

[emulsifryer]

Hello guys,
Finally i think its clear to everyone that if you forgot or lost your registered Email login details you will not be able to recover your account anymore.

Thank you, your writing always reminds me of the importance of account security. Based on that, I often change passwords regularly, especially imail. And this is my step to minimize account theft besides adding recovery accounts and cellphone numbers because email is key in the last step as account recovery.

It is important to put every account an email recovery or any account security so that no other than you can only access to that account. I don't think that changing passwords regularly is required but just for in case we should still do it for our own safety.