I just received a "password reset" mail
-
I just received a “password reset” mail. I suppose I should ignore it, provided that I have requested nothing related to my password. Thanks.
The blog I need help with is: (visible only to logged in users)
-
-
-
Many hackers gain access to blogs by changing the email address. Read > http://en.support.wordpress.com/security/
1. If you can log-in go here > Users > All Users and delete any user that does not belong there.
2. Disable post by email > http://en.support.wordpress.com/post-by-email/
3. Disable post by voice > http://en.support.wordpress.com/post-by-voice/
4. Change your blog password to a very difficult one > http://en.support.wordpress.com/passwords/#change-your-password
5. Use a secure, encrypted connection to connect to your Dashboard. Under Users → Personal Settings, check the box that says “Always use HTTPS when visiting administration pages, and click Save Changes.
-
-
P.S. I tagged this thread for a Staff follow-up. Please subscribe to it so you are notified when they respond.
-
I see that three days ago (from this message) someone tried to retrieve the password key. This generates an email to the email address on file, so if a user has forgotten their password, they can reset it.
This can happen by accident, say if someone types in a similar username and doesn’t realize they’ve misspelled it, but as Timethief points out, it can also be malicious.
I second her tips!
-
-
- The topic ‘I just received a "password reset" mail’ is closed to new replies.