Are we not secure in this forum in a case like this?

[Prosofina_G]

Hello theymos/ admins.
For a while, if I am not mistakenly I have been inactive for months or a year plus now due to my busy schedule handling physical businesses and running around for something better, decided to distance the forum for a while, although I came online few days back to just read things across the forum as I know new things might be implemented and isn't good coming back without reading to know the latest happening within and outside our local board.
But to my greatest surprise my mail was changed from the previous mail I used without me having to authorise anyone changing my mail, I want to know if this was done by admin or it's a kind of auto reset of a mail because checking from my profile this is not the original mail that I used in signing up this account and I am not also blinded not know the mail I used in signing up my account.
Please I want to know if this forum is no longer secure, whereby admin or mod could automatically reset my mail without my permission. I need help and I want theymos to look into this matter.

Below shows the screenshot of the reset mail
https://talkimg.com/images/2025/05/02/U28zRz.jpeg

[Joy- maker]

 We are still secure  @Prosofina_G, Read this link below, @theymos has already addressed this issue of yours on this thread before https://bitcointalk.org/index.php?topic=5484270.msg63622405#msg63622405
Because someone had a smilia issue last time.

[NotATether]

You can simply change your email address to a valid email. It was changed automatically by the forum software because the email was not found.

[aioc]

Please I want to know if this forum is no longer secure, whereby admin or mod could automatically reset my mail without my permission. I need help and I want theymos to look into this matter.

There's a lot of changes when it comes to security, everyone's account is very much secured they added the 2FA, the captcha link so you can only log in using that link, you've already got your answer from the two previous post and admin Theymos need not respond.
But its good that you open a thread for references about this issue, its the best time to be active again here.

[Hyphen(-)]

Please I want to know if this forum is no longer secure, whereby admin or mod could automatically reset my mail without my permission. I need help and I want theymos to look into this matter.

The forum is still safe, in fact it is safer than you used to know it because you can add extra security to your account to avoid compromising your account.

On the issue of the mail you complained about, we have seen several complains and it has been addressed by the forum administrators; your email is not valid anymore it have some issues that is why it is like that, all you can do now is to get another valid mail to change to.

[Cricktor]

OP, if you had a valid email address and your email account expired for whatever reason (didn't use it for one year e.g. and your email provider deleted your email account if they have such an account usage policy requiring a minimum use within a certain time to keep the account alive), it was detected by the forum when sent emails to your email account bounced back as undeliverable. If this invalidation of your defunct email address by forum software didn't happen, it would be possible that someone else registers your deleted email address and takes over your Bitcointalk account by requesting a password reset via email.
(At least theoretically, because the adversary would need to know which email address belongs to your Bitcointalk account. But who knows where you may have spilled the beans...)

It's possible you didn't notice that your email address expired. Well, now it's the time to fix this issue and change your account's email address to one that actually works. You may need it in case you forget your password.

To further secure an account I would recommend to setup 2FA and of course use a strong unique password that is not re-used elsewhere (longer passwords are more secure than shorter; don't use silly passwords like those from the Top-100 or Top-1000 breached passwords).

[Upgrade00]

This happened to me recently and took me off guard as I had not seen the update by theymos at the time.

You can simply reset the email and post a signed message from your bitcoin address to prove that it's still the original owner of the account who has access to it.
My only issue is the email change notification that also shows for this automated action, but theymos already addressed that in the linked message of the second reply here.

[notocactus]

But to my greatest surprise my mail was changed from the previous mail I used without me having to authorise anyone changing my mail, I want to know if this was done by admin or it's a kind of auto reset of a mail because checking from my profile this is not the original mail that I used in signing up this account and I am not also blinded not know the mail I used in signing up my account.

It happened because you use unexisiting email address for registering your account, then you won't receive any email notification for security.

• Email security notifications.

You only get the email security notifications if your email address truly exists.

I added email notifications for some security events:

Whenever your password is changed (except by an administrator), you will get an email about it.

Whenever your email is changed (except by an administrator), your old email will get an email about it with a link to lock your account. The link is valid for 14 days.

Let me know if you find any bugs.

Additionally, if you are wondering that what you should do now, let's read this post then update your email address appropriately.

Thanks to PowerGlove, who did 90% of the work on this, the much-requested 2-factor authentication feature has finally been added. You can enable it in your Account Settings, and then you have to give the code when logging in. If you don't have 2FA enabled, you have to leave the OTP field blank when logging in.

If you use the forgotten-password function, then there's an option to remove the 2FA. So 2FA does not provide any protection in case of a compromised email. Make sure that your email address is secure. If you don't want to set an email address, use something like yourUserName@invalid.bitcointalk.org; don't use a random nonsense email like y@x.com, since somebody might create that domain/email.

Let me know if there are any bugs.

[Prosofina_G]

We are still secure  @Prosofina_G, Read this link below, @theymos has already addressed this issue of yours on this thread before https://bitcointalk.org/index.php?topic=5484270.msg63622405#msg63622405
Because someone had a smilia issue last time.

Thanks for the clarification @joy-maker that is why to read broad and understand to keep a reference when such issues arise, and thanks to @theymos w ho had previously cleared the air concerning this issue.

[BIT-BENDER]

Although it is quite good to be security conscious but if you call victim to this changes means you did not use a real email address and the software did not recognize it, so if you did not use a real email address why are you not stating it in your complaint/enquiry post?
And yes with developments like this we are actually getting more secured than we have ever been.

[Obim34]

Although it is quite good to be security conscious but if you call victim to this changes means you did not use a real email address and the software did not recognize it, so if you did not use a real email address why are you not stating it in your complaint/enquiry post?
And yes with developments like this we are actually getting more secured than we have ever been.

That is exactly what happened although his case has been resolved.

Is there any benefit of Bitcointalk account having a separate email than the ones used to signup on exchanges or just part of important email for personal use, in OP case why does he have to forge an email just to signup when it takes less time to create an email.

[dkbit98]

Security is relative.
You can add a new email address and enable 2FA in your profile Account Related Settings.
Theymos also said that if you care about safety of your account you should delete your personal messages if they have any sensitive information.

[Perfectbaby]

Security is relative.
You can add a new email address and enable 2FA in your profile Account Related Settings.
Theymos also said that if you care about safety of your account you should delete your personal messages if they have any sensitive information.

Checking from op's profile the mail was also recently changed, this shows that s/he might have changed mail before coming to make this post maybe after experiencing the changes in the profile then decided to change mail before creating this post. Of course 2fa is actually more better at this point just to secure account from unauthorized personnel.