Prevent Multiple Bitcointalk Login

[CryptoPanda]

Sometime ago I lost my device I use for my bitcointalk account. I was very worried have my bitcointalk username and password saved on my browser which I now realize puts my account at risk because anyone in possession of the device can access my account without my knowledge. I propose as a security precaution that the option of logging out previous sessions and devices be added. I think if there is a way all existing sessions can be invalidated upon a login on a new device. It will be a good option to have on the profile/password change page. I’m not too technical but I googled stackflow for help. What do you guys think?

https://www.webslesson.info/2022/01/how-to-prevent-multiple-login-for-same-user-in-php.html

[Charles-Tim]

Your device is not having password? I guess the person that stole your device will format it before using it if having password.

Better not to save your login details on your device at all.

You have your login details, you can change your password, including your email if you wish.

If you login to your account, log out, your Bitcointalk account will immediately log out on all devices you used to login before. After you log out, you can login again.

[Xal0lex]

Yes, it puts your account in a lot of danger. To avoid getting caught in such situations and to avoid putting your account in danger of it falling into the wrong hands, make a habit of simply unlogging before you leave the forum. And then the problem will disappear by itself.

[LeGaulois]

Let me twist your proposition

"I propose as a security precaution that the option to save passwords in the browsers shouldn't exist."

Seriously, it's not something to do if someone cares about security

[hosseinimr93]

If your device is lost, you can easily login to your account using another device and change your password.
If someone has access to your bitcointalk account and changes the password before you, you still have the option to reset your password via your email.
If someone has access to your account and changes the email address, you have two weeks for locking the account.

You can also stake a bitcoin address.
If you lose access to your account for any reason, you will be able to sign a message from that address and prove your ownership over the account.

[PX-Z]

Bitcointalk has feature when you logout on one device, all current login session will be logout in any device.

When time of losing device, changing password is all simple resolution even in any kind of accounts in the internet no need of other feature. Simply multiple login at once is a convenient way for those who have desktop, smartphone and tabs or any device that has browser app that can login websites.

[8rch7]

I don't think good choose when using method with save password in your Bitcointalk account log in access, better if you worry about your device losing input password manually and never allowed for save it your account. I don't with Bitcointalk account only but also all access website do you think important like Mobile Banking, Exchange account market until your social media account never save password in your device.

We can't predicting with our device keep safety in our hands, but if bad thing happen later not worry with Bitcointalk account have because some one don't know about password with our account.

[_BlackStar]

I don't think good choose when using method with save password in your Bitcointalk account log in access, better if you worry about your device losing input password manually and never allowed for save it your account. I don't with Bitcointalk account only but also all access website do you think important like Mobile Banking, Exchange account market until your social media account never save password in your device.

The OP probably felt that saving the password in his browser would make it easier to login to his account any time, but sadly he lost his device. This method may be more familiar to those who have multiple accounts and each has a different password. Keeping it on your device makes it easier to login, but there are always dangers especially if you lose your device.

We can't predicting with our device keep safety in our hands, but if bad thing happen later not worry with Bitcointalk account have because some one don't know about password with our account.

Back up passwords and other important things and don't keep your devices online. This method will be very effective for your security in the long term, but you may need to remember the password every time you want to login.

Another best suggestion is, sign message to prove your account ownership. Even if the OP lost access to his account due to the loss of his device, maybe he would have gotten his account more secure if he had signed message. But on condition that he still has access to the wallet that was used to sign messages he backup earlier.

[Pmalek]

You never specified if you lost a phone or a laptop/computer. I am just going to assume you lost a phone since the latter is harder to misplace and lose.

You are already aware of how bad it is to save passwords in browsers. Not just because they are accessible to anyone who has the phone, but also because password-stealing malware has been known to have the ability to access those directories and extract the passwords. How much time has passed since your phone got stolen? More importantly, did it have any unlock security? PIN, biometrics, swipe pattern, faceID, password? Having none at all, gives the person who has your phone access to all your online accounts unless you changed their passwords. Email apps, social media, work-related stuff, Bitcointalk. Did you notice anything unusual lately?

If the phone can't be unlocked, I am sure the person only reset it to factory settings and then kept it for himself or sold it. Unless you have been targeted by a hardware hacker who knows what they are doing with the phone, I wouldn't worry much. But stop saving your passwords in browsers. It was unsafe 10 years ago, and is even more unsafe today. 

[tbct_mt2]

If you login to your account, log out, your Bitcointalk account will immediately log out on all devices you used to login before. After you log out, you can login again.

Your account won't be logged out on other devices if you log out it on one of your devices. Logging in, out. If you don't use Tor, your account will stay logging in. If you use Tor, when you close it, your account will be logged out.

Of course with your account password, you can log in, log out it anytime, on any device.

[Charles-Tim]

Your account won't be logged out on other devices if you log out it on one of your devices.

Have you tried it? You are quite wrong.

But yes (it is safe not to save passwords on device and also) good to always logout.

[hosseinimr93]

Your account won't be logged out on other devices if you log out it on one of your devices.

Charles-Tim is right.
Once you log out from your account on one device, you are automatically logged out on all other devices as well and will have to login to your account again.

[BitcoinGirl.Club]

Let me twist your proposition

"I propose as a security precaution that the option to save passwords in the browsers shouldn't exist."

Seriously, it's not something to do if someone cares about security

Security, privacy; these things are very hard to maintain these days. Whenever you are connecting with internet you are leaving foot prints. Google, Facebook and everyone are doing everything to business with your personal information.

OP, don't worry much.
I am sure you have resettled your password and changed the captcha removing URL too. Do both if you have done only one.

[KingsDen]

Sometime ago I lost my device I use for my bitcointalk account. I was very worried have my bitcointalk username and password saved on my browser which I now realize puts my account at risk because anyone in possession of the device can access my account without my knowledge. I propose as a security precaution that the option of logging out previous sessions and devices be added. I think if there is a way all existing sessions can be invalidated upon a login on a new device. It will be a good option to have on the profile/password change page. I’m not too technical but I googled stackflow for help. What do you guys think?

https://www.webslesson.info/2022/01/how-to-prevent-multiple-login-for-same-user-in-php.html

The security that bitcointalk.org offers us is purely secondary and should be treated as such. Do you mean to say that your mobile device is not protected with password? You mean if I have access to your phone, I'll immediately have access to your messages, emails, bank apps and every other sensitive data in your phone unhindered?
If that is so, it is a bad habit.
If my phone is lost, there is no way you can use it without a full software flash and once it is flashed, all my data is out of the device.

[Ryu_Ar1]

I don't think something like this is really necessary, because in terms of automatic saving on a smartphone or other device it is also our choice whether to save or not so this is indeed one of our choices.
On the other hand, I think a lot of people are prioritizing privacy now, so when we have an item, whether it's a smartphone or other gadget, we definitely give the password there and when that happens, if the worst possibility is lost or stolen, for example, we can still handle this from at first because our gadget is difficult to open, maybe it even has to be formatted first so it can open.

[JoyMarsha]

You should be concerned if you misplace your device and the person who finds it is familiar with the forum and knows your device password. No need to be alarmed if he doesn't know about the forum or your device password; he will eventually flash your device.

Many forum members also engage in this. Instead of logging in and out every time they want to post on the forum, they prefer to leave their account login open for rapid access.

[drwhobox]

Don't panic if you have a password or fingerprint lock on your device, which all phones nowadays provide as a primary security option, so your data is safe.

-I mean, if anyone finds your phone with no intention to check your data, they will wipe your data to access your phone because to remove the fingerprint or lock screen password, the phone needs a hard reset. ( I know there are other hard ways to open a password or bypass fingerprint, but the easiest way is hard reset)

- As you are worried about your bitcointalk username and password, which I hope you already changed, your account is totally fine.

I don't think good choose when using method with save password in your Bitcointalk account log in access, better if you worry about your device losing input password manually and never allowed for save it your account. I don't with Bitcointalk account only but also all access website do you think important like Mobile Banking, Exchange account market until your social media account never save password in your device.

We can't predicting with our device keep safety in our hands, but if bad thing happen later not worry with Bitcointalk account have because some one don't know about password with our account.

I assume op saves everything like me to avoid the hassles of typing long passwords manually, but yes, it is not recommended to save passwords on your mobile device. I did not do that. I only save my login details on my computer. Though it is also risky because if somehow my device is hacked, I am done, but again our lazy fingers don't let us type these long passwords.

 

[Findingnemo]

I assume most people here ises multiple accounts to login their one bitcointalk account or atleast me so everytime I have to aithorize to login while switching the device?

The solution for you is very simple don't save your password, atleast have security in your lock screen which can be either fingerprint or PIN so even if you lost your device someone can't access the device. Also there are options to wipe all your data from remote locations if you lost your smartphone.

[fortunecrypto]

Let me twist your proposition

"I propose as a security precaution that the option to save passwords in the browsers shouldn't exist."

Seriously, it's not something to do if someone cares about security

That's a good suggestion, especially for newbies for those who don't understand how hackers can hack your details through browsers, saving your login details in a browser is a big no, if you value your account and you are making money out of it, it's important that you learn to secure your account, always look at the worse possible scenario to strengthen your security, always create a password or a pin for your cellphone even if it's a spare phone.

[Mpamaegbu]

You've got all you need to safeguard your account. The major issue with online users is that most of us are often laggard when it comes to issue of cyber security. Form the habit of putting a password on every device you use for online stuff, PCs and phones. You never can tell when incidence of theft or misplacement will happen and into whose hand it gets to. With password on your device, it will be difficult for anyone to have unhindered access to your data without first flashing it. Again, for whatsoever reason, desist from the habit of storing passwords and login details on your devices. Write them out offline. Finally, stake your wallet address on the forum. It's important in helping restore a hacked or lost account. In case you haven't done that. Here's the link – Stake your Bitcoin address here