My blog has been hacked

• 

  thesecretdiaryofasinglemum · Member · Apr 30, 2015 at 7:39 pm

  • Copy link
  • Add topic to favorites

  Hi, my blog has been hacked twice this year, can you possibly check out what is going on and why this keeps happening?

  The blog I need help with is: (visible only to logged in users)

• 

  rachelmcr · Member · May 1, 2015 at 9:43 am

  • Copy link

  Hi there,

  I don’t see any evidence of hacking on your account, but I do see that the password has been reset repeatedly. To reset your password, someone would need access to your email (to go through the password reset process), so one good way to keep your account secure is to make sure your email is also secure.

  I’d also recommend enabling Two Step Authentication. That adds an extra level of security to your account, to prevent someone from resetting your password and accessing your account and blog without your permission.

• 

  thesecretdiaryofasinglemum · Member · May 5, 2015 at 8:34 am

  • Copy link

  Hi there rachelmcr – it has happened twice over the weekend, and again now.

  I changed my password over the weekend and just woke up to discover that it’s been hacked and posted on again.

  I have left the hack post on there this time so that you can actually fix it.

  Look forward to hearing from you.

• 

  rachelmcr · Member · May 5, 2015 at 9:51 am

  • Copy link

  Thanks for showing me that post! You can delete it now if you’d like.

  Your account wasn’t actually hacked — no one logged in to your account. Instead, that was posted with the Post by Email feature.

  Anyone who has your post by email address can post to your blog that way, which is why it’s important to keep that email address secret. You can prevent people from publishing to your blog that way by either regenerating the post by email address (to create a new secret address) or by deleting the address to disable that feature.

  You can do that from your My Blogs page here:

  https://thesecretdiaryofasinglemum.wordpress.com/wp-admin/index.php?page=my-blogs

  You can hover over your site’s Post by Email address there and click on “Regenerate” or “Delete” to take care of that. Please let me know if I can do anything more to help. :)