hack?

• 

  dickenswrites · Member · Sep 7, 2018 at 7:11 pm

  • Copy link
  • Add topic to favorites

  I got a message saying someone attempted to change my password. I did NOT do that.
  So, now I’m thinking i should just delete this. thoughts?

  The blog I need help with is: (visible only to logged in users)

• 

  torres126 · Member · Sep 7, 2018 at 8:58 pm

  • Copy link

  Hi there, if you believe that somebody has compromised your account, changing your password is the best thing to do. Ensure it’s a secure password: https://en.support.wordpress.com/selecting-a-strong-password/

  I’d also suggest highly recommend using 2 Step Verification: https://en.support.wordpress.com/security/two-step-authentication/

  Also ensure that nobody knows your Post by Email address: https://en.support.wordpress.com/post-by-email/

  This will help keep your account very secure. However, in terms of this incident, I’ve tagged staff as they’ll be able to check if there was any suspicious activity on your account.

  Lastly, don’t worry if it was just a password reset. I get these every now and then too, people (frustratingly) only need your username to request one, and your password isn’t actually reset unless you act on that email or text message.

  Hope this helps!

• 

  brookedot · Member · Sep 7, 2018 at 9:52 pm

  • Copy link

  Hi @dickenswrites,

  Can you tell us a bit more about the email you received? I see that a password reset link was sent about 14 hours ago, if you did not request the password reset it is possible someone else entered your username or email into the reset form.

  I’m also noticing your site was deleted 3 hours ago around the time when this post was published can you confirm that it was you who deleted your account?

  If not, then we suggest changing your password and request staff to restore the site. Please also follow security best practices to secure your account.