Password reset email question
-
Actually I don’t think this is legit = but the directions I saw on another Q&A troubled me = “Hi there,
I want to reassure you that you can safely ignore those password reset emails. Your WordPress.com password won’t be changed unless you follow the password reset link in the email to complete the process.”But the email I got said to click the button/link in the email [which I have not done]
If I am to ignore it but if I think I might need to reset it, and ‘follow the link’ to complete the process then what happens if it’s a bogus link but I think it might be good?
Can I send this to anyone to check it out?? I’ll be glad to trash it and won’t be clicking on anything but it is troubling to me that these emails might cause others to click them.
The blog I need help with is: (visible only to logged in users)
-
Hi there–just to be clear, did you receive this e-mail and are asking for guidance, or did you see this on another thread and are worried someone else got bad advice?
I’m going to answer as if you are asking the question directly–so if I’ve guessed wrong, I apologize.
You are right to not click anything if you didn’t request the password reset. There are two scenarios in which you could be getting this e-mail. It could be that someone was trying to get into your account (or made mistake) and ended up having a legitimate password reset e-mail sent to you. If that’s the case, clicking the link wouldn’t do any harm. BUT, the other possibility is that it’s a phishing scam and clicking on the link takes you to a bogus website and basically starts a very bad day.
So, yeah, don’t click :)
That having been said, you could take a screen shot of the e-mail with a tool like http://snag.gy/, black out all of your personal information, and post it here so someone can let you know which case you are dealing with. I don’t really think that last step is strictly necessary, but it wouldn’t hurt.
-
I want to be sure so want to post the picture here but can’t find any way to do that == I did a click and drag but that didn’t work….
-
If you already have the photo on your computer, the easiest thing is to put it in your media library and then post a link to it. Here’s how that works:
http://en.support.wordpress.com/make-a-screenshot/If you used the http://snag.gy/ tool, when you created the image it should have also assigned it a url. If you copy and paste that url to the forum, we’ll be able to see the photo.
-
Thanks much -= I did a Mac screenshot…and since I don’t really keep my WP site up, didn’t know ref the media file
http://wp.me/aLqw1-7 – that’s the short link.
-
I’m super amused that you blacked out your eyes on the blog post. :)
So that’s either a legitimate password reset e-mail or an excellent phishing copy.
I really think you are fine. If you decide you still want to change your password, you can do that, just don’t use the email. Go to WordPress.com, hover over your avatar in the upper right corner, click settings and then choose password from the column on the right.
Then you should be set!
-
Thanks so much…I did think I went overboard on the eyes!!! I am glad I asked even if it’s a good exploit or valid === nice to know these things….
-
@victoriajz
I’d like to offer this post of mine to you http://onecoolsitebloggingtips.com/2014/03/02/how-to-keep-your-blog-safe/ -
-
- The topic ‘Password reset email question’ is closed to new replies.
WordPress.com Forums 