Hacked multiple times even thought I use the Google Authenticator app

• 

  morganlaure · Member · May 29, 2014 at 6:19 am

  • Copy link
  • Add topic to favorites

  I keep getting hacked even though I use the google authenticator…

  The blog I need help with is: (visible only to logged in users)

• 

  raincoaster · Member · May 29, 2014 at 6:33 am

  • Copy link

  How exactly do you know? What does the hacker do?

  Change your EMAIL password, because the number one way people get into blogs here is by hacking your email. Then they hit “forgot my password” and away they go.

• 

  morganlaure · Member · Jun 2, 2014 at 9:39 pm

  • Copy link

  Okay, I’ll try that and see if it works. Thx

• 

  thistimethisspace · Member · Jun 2, 2014 at 10:43 pm

  • Copy link

  I’m with raincoaster on this > Go to your email program and change the password to a very difficult one because that’s how many hackers gain access to blogs. Then read this please and act on what you find there > http://en.support.wordpress.com/security/

  It’s my experience that blogs do not get hacked unless you fail to follow security protocols.
  http://onecoolsitebloggingtips.com/2014/03/02/how-to-keep-your-blog-safe/

  1. If you can log-in go here > Users > All Users and delete any user that does not belong there.

  2. Disable post by email > http://en.support.wordpress.com/post-by-email/

  3. Disable post by voice > http://en.support.wordpress.com/post-by-voice/

  4. Change your blog password to a very difficult one > http://en.support.wordpress.com/passwords/#change-your-password

  5. Use a secure, encrypted connection to connect to your Dashboard. Under Users → Personal Settings, check the box that says “Always use HTTPS when visiting administration pages, and click Save Changes.

  I tagged this thread for a Staff follow-up. Please subscribe to it so you are notified when they respond.

• 

  shawnajroberts · Member · Jun 3, 2014 at 12:59 am

  • Copy link

  Hi there!

  raincoaster and thistimethisspace are completely correct. Make sure you change the passwords on other accounts associated with your WordPress.com account.

  If you’re seeing posts published that you didn’t create, its likely related to Post by Email or Post by Voice functions. thistimethisspace gave you some links that will show you how to disable those.

  Let me know what type of activity you’re seeing and if you continue seeing it!

• 

  morganlaure · Member · Jun 12, 2014 at 9:08 pm

  • Copy link

  I tried changing my password to something hard, there were no other users and I changed my email passwords, but it kept happening. Today I disabled the post by voice and email – let’s see if it was that. :) Thanks all.

• 

  raincoaster · Member · Jun 12, 2014 at 9:27 pm

  • Copy link

  without even looking I know it was the post by email, and your email was hacked.