Is resetting a BTT account password bad?

[CryptoHeadlineNews]

I think this forum doesn't need people who don't take things serious especially when it comes of password saving and phrase backup because I can still believe that one day he would come crying for losing his entire asset.

Sorry you mean the same forum that doesn't even verify your information when you register, the forum is one of the platforms that I have registered and noticed they don't give a fuck about anything you do. The forum is opened for everyone and you don't have to be some gurus or over serious person before you think you can register on the forum. The forum might even love the inexperienced users more so it can build them to becoming better cryptopreneurs. Just for context, my knowledge on Bitcoin isn't the same as of when I joined the forum, I have understood something's better that I won't have understood if I felt the forum only needed serious user and I didn't register.

I think you are misunderstanding what "smartgold" meant when she said the forum not meant for serious minded individual, because of anything anybody should never forget on this forum is his/her password & username, which judging from O.P's statement, this is not the first time, nor second time, or third time he/she has forgotten the password & kept resetting it without having a rethink to write it down on a piece of paper for future reference, which is the main reason why "Cai Lun" a Chinese royal court official invented paper & pen 2000 years ago, as a medium for future reference in times of need, which O.P failed to adopt. So i think what O.P need to do now is pen down on a piece of paper whatever password or username he uses, and stop having the mindset of resetting it everytime he forget.

[1714910360]

1714910360

[1714910360]

1714910360

[1714910360]

1714910360

[1714910360]

1714910360

[1714910360]

1714910360

[SmartGold01]

I think this forum doesn't need people who don't take things serious especially when it comes of password saving and phrase backup because I can still believe that one day he would come crying for losing his entire asset.

Sorry you mean the same forum that doesn't even verify your information when you register, the forum is one of the platforms that I have registered and noticed they don't give a fuck about anything you do. The forum is opened for everyone and you don't have to be some gurus or over serious person before you think you can register on the forum. The forum might even love the inexperienced users more so it can build them to becoming better cryptopreneurs. Just for context, my knowledge on Bitcoin isn't the same as of when I joined the forum, I have understood something's better that I won't have understood if I felt the forum only needed serious user and I didn't register.

I think you are misunderstanding what "smartgold" meant when she said the forum not meant for serious minded individual, because of anything anybody should never forget on this forum is his/her password & username, which judging from O.P's statement, this is not the first time, nor second time, or third time he/she has forgotten the password & kept resetting it without having a rethink to write it down on a piece of paper for future reference, which is the main reason why "Cai Lun" a Chinese royal court official invented paper & pen 2000 years ago, as a medium for future reference in times of need, which O.P failed to adopt. So i think what O.P need to do now is pen down on a piece of paper whatever password or username he uses, and stop having the mindset of resetting it everytime he forget.

I think you just automatically explained all mean in that context because looking deep to what op is saying, there is no sense having to keep resetting his account or coming later end to exclaim for his or her nasty and silly act. Well there is no restrictions over here that limits such an incoherent words and statements, that is if actually he could be heard again or given attention as I believe this thread would be active for references if there are issues to come.

The suggestion to be serious comes from good advice, so that one day such a situation does not happen.
Imagine that the OP visits a forum regularly, for which he forgot the password for the hundredth time, but he is successful on the forum, and one day he increased his rank. But suddenly something went wrong, and he could not log into his account. And he has no password or recovery mail.

Absolutely this was my point as well.
At this point would he keep bugging Theymos for his action to restore back his account or call on mod and admin to look into his case. No because he was careless and not security conscious. 

[Latviand]

You are free, and no one is against you changing your password because, as you indicated, it is for security reasons.

But what reason would that be that you resort to changing passwords? I mean, you can just tick the Always Logged In in your browser so you don't have to relog. I don't know of any reason that someone will hack your forum account even if it makes a lot of money from signature campaigns, you can always report that you're account's stolen.

When an account activates and appears suspicious, or the manner of posting and interactions in the account changes, reputable forum users usually use the password changing time as evidence to show the user wrong or to protect the account from being utilised by a hacker.

Highly circumstantial evidence though, what if they've forgotten their password or they've updated their password scheme but that's an unlikely thing to happen. Most password changes are almost always suspicious given how account selling is a thing here. Nothing wrong with changing password, as long as you can prove it's you by signing your PGP key, this one pretty much helps you avoid the suspicion altogether.

[skarais]

You are free, and no one is against you changing your password because, as you indicated, it is for security reasons.

But what reason would that be that you resort to changing passwords? I mean, you can just tick the Always Logged In in your browser so you don't have to relog. I don't know of any reason that someone will hack your forum account even if it makes a lot of money from signature campaigns, you can always report that you're account's stolen.

You should know how to properly protect your account, and one way is by changing your password regularly and backup securely.
Storing your password online (eg at Google) is too risky for your security. It is not recommended for anyone concerned with security and privacy although you can login easily without bothering.

Imagine if you never backup your password, but you saved them in your browser, but suddenly you lost your device or it broke for something, how can you recover your account?

[Smartvirus]

Ain’t nothing bad about having to change your password from time to time. In fact, it’s something you should do occasionally should you have any sense of insecurity and even when you don’t, it ain’t a bad idea and the forum has made provisions for change of passwords. Many experienced users still do change their password and in the event that you get investigated due to these changes, don’t feel so bad. It’s just a verification if it were to be you and for the rest of the forum to be safe about the account.

The only issue that could follow regular changing of password is you. You might forget or mix things up and that could be the end of it. Good enough, a signed address could aid you in recovery as concerns the forum so, you might just do that. Writing your passwords anywhere else, in a diary or on an online note pad have its measure of risk. Be guided!

[Latviand]

~

You should know how to properly protect your account, and one way is by changing your password regularly and backup securely.
Storing your password online (eg at Google) is too risky for your security. It is not recommended for anyone concerned with security and privacy although you can login easily without bothering.

Imagine if you never backup your password, but you saved them in your browser, but suddenly you lost your device or it broke for something, how can you recover your account?

My guy, I have so much going on with my life right now and changing passwords or using different passwords for different accounts in different platforms are the last thing in my mind. It's only a risk if you're handling sensitive information that can jeopardize a lot of people which is unlikely for an individual and most hackers don't really target individuals frequently. Using the same password would probably be the solution for when you lose your device, imagine scrambling through all the passwords you've used and end up not knowing which one you've used.

[Crypto Library]

Is resetting passwords that bad, or why was this option even added there? Will the message disappear after 120 days?

You may change your account password at any time at your own discretion.  Even if you change your account password every day, it is not a problem because it is your personal safety. If you are the actual owner of that account then changing the password is nothing to fear for you.  Changing the account password is feared by those who hack the account or try to use it by buying the account.  Because there are many people in this forum who check the account of changed password many times. so if the password of a hacked account or purchased account is changed and since then a different user starts using that account then that account is often reported due to which the account may get red tag. So I don't think changing your personal account password will cause any problem

[Z_MBFM]

Definitely you can reset your password
When you forget your account password it is normal that you need to reset the password via email.  All platforms provide this opportunity so why is it can be bad for bitcointalk? You can change your personal password again and again for account security. it's not bad.

So carry on...
Chears 🤘

[Rruchi man]

4. I always think of BTT as a highly valuable platform.  I'm in fear that my BTT account would get compromised someday if I saved my password in an online place.

It is a highly valuable platform, but not to people that do not know about it. A regular cybercriminal or criminal who comes across your bitcointalk account password will not be interested in it if they do not know what it is, and if your account is low profiled especially.

So I never saved my password anywhere. (I know I should have used a diary to note down my password.)

You forget easily like you have identified, not keeping your password anywhere is a terrible choice to make. If you cannot recover it any day things get mixed up in your head, your account is gone.

Write your password down in your dairy in a format that nobody will be able to decipher. Just devise a means that only you know.

[Sandra_hakeem]

It's never a wrong Choice to make... I've done mine once though; only that you gotta be careful how frequently that happens... That's not just gonna raise suspicions but it'll also make your account easily cracked at the time... except and otherwise you had your address staked on that thread mentioned above, then you can put up claims to it.
Some peeps get too scared to update 'em passphrases thinking they'll be held responsible for Thier actions - maybe someone's gonna pop up somewhere and begin to suggest the account's been hacked and so on..well, that's not true.

Sandra 🧑‍🦰

[coin-investor]

Overall you have to think about what's best for your account and resetting your password is your safety net but even if you set it a hundred times if you have a weak password resetting will not work, if your account here is valuable use a very strong password that even who knows you can crack it, never use a password that is associated for you like your birthdate and of course staking your address is a must, it's our unique recovery method here this is Bitcoin forum so we have our own way of recovery instead of using 2FA or any other means.

[Synchronice]

I think this forum doesn't need people who don't take things serious especially when it comes of password saving and phrase backup because I can still believe that one day he would come crying for losing his entire asset.

That's a little bit offensive, isn't it? A lot of people learnt that they have to take their privacy and security more seriously after visiting this forum and forum owner has said many times that this forum will always remain as free and welcoming as possible.

[SmartGold01]

I think this forum doesn't need people who don't take things serious especially when it comes of password saving and phrase backup because I can still believe that one day he would come crying for losing his entire asset.

That's a little bit offensive, isn't it? A lot of people learnt that they have to take their privacy and security more seriously after visiting this forum and forum owner has said many times that this forum will always remain as free and welcoming as possible.

Actually not offensive but it show incapability of op not to have jut down his details, yes we believe here is a free place that teaches people lot of things but that's doesn't mean he should be that lose or open to keep misplacing his password or regularly resetting profile. Does this shows a responsibleness or someone who wouldn't come in anytime soon to exclaimed about any fault some days?
I believe he has read lots of post across the forum that keeps preaching about security and how to protect their account against hack so why on earth would he keep violating those rules so why then is still accessing this forum haven known that after some moments he would reset again.

[Mpamaegbu]

~

Sorry you mean the same forum that doesn't even verify your information when you register, the forum is one of the platforms that I have registered and noticed they don't give a fuck about anything you do.

As funny as that sounds, it's the truth. There was a time I spent some hours in contemplation on that. Even a common thing as a 2FA or email verification when one logs in, the forum doesn't see any reason to implement any. I mean, that can further strengthen accounts security.

The forum is opened for everyone and you don't have to be some gurus or over serious person before you think you can register on the forum. The forum might even love the inexperienced users more so it can build them to becoming better cryptopreneurs.

I won't be surprised if that's the mission statement of this forum. I've come to realize that theymos doesn't like anything that will stand as encumbrances to users here. He delays in implementing anything he knows will put a lot of users in discomfort, especially when such is called for by veteran users. I think having more users onboard makes much sense to him than policing harshly those already here.

[Bushdark]

I think this forum doesn't need people who don't take things serious especially when it comes of password saving and phrase backup because I can still believe that one day he would come crying for losing his entire asset.

That's a little bit offensive, isn't it? A lot of people learnt that they have to take their privacy and security more seriously after visiting this forum and forum owner has said many times that this forum will always remain as free and welcoming as possible.

This is a security measure because many people that have lost there accounts here and finally come to the forum to complained have noticed that there accounts was compromised by changing there password many times without there noticed. Knowing how many times an account password was changed is a security measure that help us to know whether a current account that started being very active is compromised or not.

This measure had helped a lot of people to know that a particular account is compromised or not. If the setting or changing or resetting account is not there, many will lost there accounts and not able to get there accounts back because they can't remember there password. We can either reset out account through the forum or through our email.

[SmartGold01]

I won't be surprised if that's the mission statement of this forum. I've come to realize that theymos doesn't like anything that will stand as encumbrances to users here. He delays in implementing anything he knows will put a lot of users in discomfort, especially when such is called for by veteran users. I think having more users onboard makes much sense to him than policing harshly those already here.

But sorry to say, if implement any security policy would be a barrier to him why then do we have merits system?
Because from my own point of reasoning security policies can be liken to be as merits restrictions because, what does it mean for someone to be here without having a total freedom of ranking, same it's to security measures because I don't see any reason for one to be here without a proper security protections. If so the forum would had been that open for everyone to rank without any restrictions, anyway not that I am trying to deviate from the main purpose of this topic, but we must know is something that is called for.

I don't think that is a discomfort even as much we are trying to make the forum easily accessible Theymos should also try to implement some security standard whereby it could be very hard for an account to be hacked or stolen from the original owner, I know how many countless issues that talks about account bridging while some complained of someone using their account to apply for a loan they request for, this looks very crazy, like, let it be that before your account could be access from another advice either you must provide OTP from email associated with the account or trying to use 2fa just as you said earlier I think this could helps in reshaping the entire system than merits system. But however, meriting is also another pretty cool way to avert shitposters and spammers.

[libert19]

I do not personally think password change is any red flag as it's one of recommended security practices.

But it is true that when some account has it's password changed recently/frequently, it might get under radar of people who check for hacked/sold accounts, so they can reward that account with proper trust rating.

I always think of BTT as a highly valuable platform. I'm in fear that my BTT account would get compromised someday if I saved my password in an online place. So I never saved my password anywhere. (I know I should have used a diary to note down my password.)

Use offline password manager. I myself use password safe [1] on my android. Encrypt it and make backups regularly, so even if someone somehow gets access to the cloud file, he can't have access to the data without knowing the password.

Stake your Bitcoin address as an alternative way to secure your account [2].

 
[1] Password Safe

[2] Re: Stake your Bitcoin address here

[Aanuoluwatofunmi]

Is resetting passwords that bad, or why was this option even added there? Will the message disappear after 120 days?

We should first ask ourselves if there's a need for resetting the password in the first place, someone like me will always set the option for always stayed logged in on my device as long as i know am the only one that always have access to my device, resetting password is a choice to do and if you know doing that will complicate things more then you shouldn't, note that while resetting your password, there will be a request for confirmation of your email and I code will be sent there for verification, this may be a bad omen for those using fake email address or yet to sign a message on bitcointalk.

[CryptopreneurBrainboss]

But sorry to say, if implement any security policy would be a barrier to him why then do we have merits system?
Because from my own point of reasoning security policies can be liken to be as merits restrictions because, what does it mean for someone to be here without having a total freedom of ranking, same it's to security measures because I don't see any reason for one to be here without a proper security protections. If so the forum would had been that open for everyone to rank without any restrictions, anyway not that I am trying to deviate from the main purpose of this topic, but we must know is something that is called for.

The point of the forum is just to hangout with like-minded individuals, it's just an account (nothing special) we shouldn't be giving too much value to it with all the security measures we're requesting for. Merit isn't a security measure. There wasn't any merit feature before, it was just implemented 5 years back when the industry begin to gain more attention and the forum began receiving more spammers in their numbers farming the forum for bounty/signature and it resulted to much spam. The merit system is needed but the other security features isn't. No big deal in forgetting your password and requesting for a new one. The procedure is automatic and mightn't need any moderators intervention when you have a valid working email so no big deal there.

As funny as that sounds, it's the truth. There was a time I spent some hours in contemplation on that. Even a common thing as a 2FA or email verification when one logs in, the forum doesn't see any reason to implement any. I mean, that can further strengthen accounts security.

That's my point exactly, like the forum was created with an opened and free minded approach. Satoshi/theymos didn't want to create any discomfort with registration and using the forum but we're the ones complicating things with all our unofficial rules and regulations. What we should be concentrating our security awareness on is our Bitcoin wallet and not the forum but I understand SmartGold01 advice and acknowledge that she meant no harm but it's left for each of us to decide how we want to keep our account safe and bare the consequences of our actions. OP resetting account password on and off the forum isn't a crime or bad, it's even recommended to keep your accounts more secure but make sure you can defend yourself properly without any doubt when your attention is called upon.

[Mpamaegbu]

~snipped~

That's my point exactly, like the forum was created with an opened and free minded approach. Satoshi/theymos didn't want to create any discomfort with registration and using the forum but we're the ones complicating things with all our unofficial rules and regulations.

Well, I'm of the opinion that he should create it now, seeing the level of complaints of account hacks and all that. A 2FA should help buffer the security of accounts here. I know it takes time to recover any hacked account even when the owner has a signed message from a wallet they've staked here. During that period of wait, the user would've lost their slot in a campaign. That's me assuming they were in a campaign before that hack happened. Just like posting here and ranking up was without hassles in the past until theymos implemented the merit system to control spamming. He can also implement 2FA on accounts. After all, change is the only constant thing in life. BTW, we've seen less serious business minded sites  implement the 2FA on their platforms. So, it shouldn't be a big deal for theymos to implement. He can also delegate it to programmers here and I'm sure someone will pick up the challenge.