Security Help
-
I just created this account and I am not really sure how it works or how to navigate. But I believe my profile showed that I posted something I did not post… can people post on your profile? I got a notification right after creating the account that said someone had logged in without using an email. Have I already been hacked?
The blog I need help with is: (visible only to logged in users)
-
Hi there,
It is highly unlikely that you have been hacked.
Nothing can be posted on a WordPress.com profile. Your profile is the information that appears at https://wordpress.com/me/ and only you can access that page.
You have published your first post on your new site, though, at https://rosestea.home.blog/2018/11/01/my-first-blog/, and we do show a notification if you publish your first post on a new site.
the account that said someone had logged in without using an email
The only notification I can see on your account is one that says someone logged in with and email link, right before the notification congratulating you on your first post.
Did you click on a link in your email in order to log into your site? Then you triggered that notification.
If you did not write that post, and you did not click on an email link to log in, then yes, someone else has access to your account, but that means they also have access to your email account, as that link that we email to you is currently the only way to log into your account.
In that case, please immediately change your email account’s password, and consider enabling two-factor authentication on your email. And then also add two-factor authentication to your WordPress.com account as an extra layer of security.
You can learn how everything works with your site on WordPress.com here:
- The topic ‘Security Help’ is closed to new replies.