account is not secured?

• 

  wcdctest1 · Member · Sep 29, 2006 at 9:08 pm

  • Copy link
  • Add topic to favorites

  i noticed that if i log in, blog a little bit, and “accidently” let someone else use the computer without logging out, anyone could change my profile including my password. Shouldn’t wordpress make users type their password to see their profiles at least?

• 

  timethief · Member · Sep 30, 2006 at 12:26 am

  • Copy link

  This blogger has elected to delete his or her account.

• 

  podz · Member · Sep 30, 2006 at 10:35 am

  • Copy link

  For the people who search:
  “Shouldn’t wordpress make users type their password to see their profiles at least?”

  If you had logged out the cookie would have been expired and your information would be safe.
  Your information is secure from our side but you do need to do the sign out bit – that and have good passwords too.

• 

  nosysnoop · Member · Oct 1, 2006 at 2:04 am

  • Copy link

  What is a good password? I’ve heard of combining numbers with letters. Now I’m going by the password that WordPress sent me.

• 

  podz · Member · Oct 1, 2006 at 8:21 am

  • Copy link

  I have 1 password that I use anywhere as a ‘first choice’ because it’s quick and easy to remember. That is an 8 letter number.

  I use passwords like this for stuff that is sort of important: Tv6Va4rV
  8 letter/number combination

  For really important stuff – like all my domain passwords:
  PWG_O0[bM}VuDWzg
  16 character/number/letter combos

  And because I use them I have a password manager:
  Keepass (it’s free)

• 

  raincoaster · Member · Oct 1, 2006 at 2:21 pm

  • Copy link

  Going back to the original point of this thread, I don’t think WordPress has any obligation to protect people against stupidity of that particular level. You’re supposed to know how passwords work and handle things on that end yourself; if you can’t remember to sign out and you “accidentally” let someone malign use your computer, you shouldn’t be allowed to blog unsupervised anyway.

  I think there’s an expectation of a minimum level of competence, and that it’s fair.

• 

  drmike · Member · Oct 2, 2006 at 9:15 pm

  • Copy link

  I go with two words and a number stuck in between them for a password myself.