just got message that a NEW USER registered on my site — WHAT THE HECK?

• 

  justyourtypedtp · Member · May 9, 2013 at 8:02 pm

  • Copy link
  • Add topic to favorites

  I don’t know this person or how they registered as a USER on my site?

  New user registration on your site Just Your Type Desktop Publishing:

  Username: neon5marlin

  E-mail: (email visible only to moderators and staff)

  The blog I need help with is: (visible only to logged in users)

• 

  timethief · Member · May 9, 2013 at 8:05 pm

  • Copy link

  There is no username account here for https://en.forums.wordpress.com/profile/neon5marlin

  I’ll tag this thread for Staff assistance. Please subscribe to the thread so you are notified when they respond and please be patient while waiting.

• 

  timethief · Member · May 9, 2013 at 8:07 pm

  • Copy link

  1. Go to your email program and change the password to a very difficult one because that’s how many hackers gain access to email accounts and to blogs.

  2. Change the password on your WordPress.com username account to a very difficult one. http://en.support.wordpress.com/passwords/#change-your-password

  3. Register a new blog http://en.support.wordpress.com/register-a-blog/ Be sure your blog password to a very difficult one > http://en.support.wordpress.com/passwords/#change-your-password

  4. Disable post by email > http://en.support.wordpress.com/post-by-email/

  5. Disable post by voice > http://en.support.wordpress.com/post-by-voice/

  6. Use a secure, encrypted connection to connect to your Dashboard. Under Users → Personal Settings, check the box that says “Always use HTTPS when visiting administration pages, and click Save Changes.

  Then read this please knowing that blogs don’t get hacked when security protocols are followed. > http://en.support.wordpress.com/security/

  Set up two step authentication http://en.support.wordpress.com/security/two-step-authentication/

• 

  jonathansadowski · Member · May 9, 2013 at 10:37 pm

  • Copy link

  Hi there,

  I do not see any new users on your blog, nor, as timethief pointed out, does the user listed actually exist. Most-likely the email you received was not from WordPress.com, and was instead sent by somebody trying to appear to be WordPress.com

  I have sent an email to the address on file for this account. I’d like to get some more information from you about the email you received. In the mean time, if you haven’t already please change your password and follow the other helpful advice posted by timethief in her last reply.