Author

Topic: Resetting password with Secret question will still lock account? (Read 195 times)

legendary
Activity: 2296
Merit: 1063
If you ever lose your password, then make a new account and post a signed PGP message or Bitcoin address message, and that will be used as evidence to prove it is you who is asking for your account back.

What about a member who doesn't know how to sign this message like myself? How can they go about it?
here is an instruction(Recovering hacked/lost accounts) theymos posted if your account is either hacked/lost access. it'll be best to learn how to sign a message since even on the thread I shared posted by theymos you might still need to sign a message proving your ownership of the account. there are tutorials here in the forum on how to sign a message. here's one tutorial thread for example How to sign a message?!
hero member
Activity: 532
Merit: 508
What do you believe in?
If you ever lose your password, then make a new account and post a signed PGP message or Bitcoin address message, and that will be used as evidence to prove it is you who is asking for your account back.

What about a member who doesn't know how to sign this message like myself? How can they go about it?
legendary
Activity: 1568
Merit: 6660
bitcoincleanup.com / bitmixlist.org
Your best way back into your account is to create a PGP fingerprint or a bitcoin address and post it in one of the threads below:

Stake your Bitcoin address here
The BCT PGP/GPG Public Key Database: Stake Your PGP Key Here

If you ever lose your password, then make a new account and post a signed PGP message or Bitcoin address message, and that will be used as evidence to prove it is you who is asking for your account back.
legendary
Activity: 2170
Merit: 3858
The easiest and fastest way to recover your account is reset password via email. To use this procedure, you must make sure your email won't be hacked by setting up
  • Strong password
  • Activate 2FA protection but avoid SMS code method because government can get access to your SMS code and hack your email.

Next method is recover it through your Bitcoin signed and staked messages but it will need manual recovery approval and need more time. Sign and stake your Bitcoin address and message are useful, not harmful and you should do it but I'd like to self-recovery my account password via email, not via the manual procedure.
sr. member
Activity: 742
Merit: 392
I just found out about this. and actually I also have a security/secret question. I thank you OP for bringing up this topic. and it seems I have to be more careful with the email that I have in order to stay active. because if my account will be locked if using security/secret question. then I think it will be quite troublesome. so it's better for me to keep my password in mind. and keep my email active. because after knowing this then of course I will not use security/secret questions.
legendary
Activity: 2436
Merit: 2087
Have you signed bitcoin message? If you have one, you shouldn't worry because the recovery team can help you get your account back if it's locked. But if you don't want to bother, then don't use secret questions when you lose your password.

The best advice for you perhaps, is:
1. Use a strong password to prevent hacking.
2. Store your passwords securely (perhaps on a separate device) and don't save them in your browser if your device is frequently accessed by other people.
3. Have a strong email password, make sure you keep your email active and you can reset password with this option.
hero member
Activity: 826
Merit: 753
Living Life with Hemophilia🤡
because I don't want my account to be locked in case I ever forget my password and I'm worried about using a secret question to reset it. or I also don't want anyone else trying to hack my account using it. although I'm pretty sure no one will be able to guess the answer to my secret question. because it's really an answer that only I personally know.
But is it still the same now, that is, our account will be locked if we try to recover our account using a secret question?
I think there is no reason to worry if your account is locked because the way to release the lock is already provided. And besides, why do you need to use a secret phrase when resetting your account password? Where you can use the email option, this applies when your account is hacked. Also I think this option of secret question provides another level on security so I don't think there is any need to delete it.
Moreover, if your account gets locked as a result of using this option, you can easily get the account in your hands through sign a message by any of your previously used wallets. However, the only problem is, in this case, is sometimes there may be a delay in getting your account.
legendary
Activity: 2016
Merit: 2169
Professional Community manager
because some time ago I still have a secret question in my account. after reading the thread. finally I decided to delete my secret
You do not have to delete your secret question if you're sure no one can guess the answer.
The lock feature when you try to recover your account using the secret question option comes in handy if someone hacks your account and you want it locked while you try to recover it through the admins.

No onenca use the feature to access your account and worse case scenario is you locking yourself out, which you can easily undo if you have a staked address or still have access to the email used to open the account.
hero member
Activity: 966
Merit: 801
The warning message before you want to set up your secret question is already enough for me.

Quote
Secret Question:
To help retrieve your password, enter a question here with an answer that only you know. Using this feature is not recommended. Anyone who guesses your secret answer will have access to your account. It's like a second password.

But maybe a slight improvement like directing the thread you mentioned above is better, so they can read why it's not recommended and we shouldn't use secret question, so the new one would be.

Quote
Secret Question:
To help retrieve your password, enter a question here with an answer that only you know. Using this feature is not recommended. Anyone who guesses your secret answer will have access to your account. It's like a second password.
legendary
Activity: 1960
Merit: 1908
Marketing Campaign Manager |Telegram ID- @LT_Mouse
Yeah, this is still the same case. You will have your account locked if you use the secret question to reset the password.
But no worries. You can use your any previously posted bitcoin address to recover your account or you can stake an address here- https://bitcointalksearch.org/topic/stake-your-bitcoin-address-here-996318
hero member
Activity: 546
Merit: 583
I was honestly shocked after seeing an old posting thread about a secret question that apparently shouldn't be used to recover our account if we forgot our account password. because it will result in our account being locked.

this is the thread i mean :
https://bitcointalksearch.org/topic/m.12670918 (PSA: ACCOUNTS WILL BE LOCKED IF THE SECRET QUESTION IS USED TO RECOVER IT)

But since it's an old thread or announcement. so I also have a question whether this still applies to now?

because some time ago I still have a secret question in my account. after reading the thread. finally I decided to delete my secret question.

because I don't want my account to be locked in case I ever forget my password and I'm worried about using a secret question to reset it. or I also don't want anyone else trying to hack my account using it. although I'm pretty sure no one will be able to guess the answer to my secret question. because it's really an answer that only I personally know.

But is it still the same now, that is, our account will be locked if we try to recover our account using a secret question?

and if still the same. then wouldn't this issue be better pinned or kept in the FAQ? so that more beginners know about it.

Thank you in advance
Jump to: