Suspicious log in

• 

  louindistress · Member · Jul 2, 2021 at 11:03 am

  • Copy link
  • Add topic to favorites

  I received a notification on WordPress today saying someone logged into my account using an email link. I did this a few days ago but I’m not sure if it was the same incident. How can I find out.

  The site I need help with is awritersmusingsbythebeach.wordpress.com.

• 

  staartmees · Member · Jul 2, 2021 at 12:29 pm

  • Copy link

  To tighten security of your wordpress.com account: change your password to a really strong password, activate 2FA. Do the same for your email account. Also avoid the use of open wifi and public computers.

• 

  kokkieh · Staff · Jul 3, 2021 at 10:41 am

  • Copy link

  Hi there,

  I can see one successful email-login to your WordPress.com account three days ago.

  Only someone with access to your email account can log into your WordPress.com account using an email link, so if that wasn’t you, it means someone else has access to your email account.

  So first of all, update your email password and consider enabling two-step authentication on your email account. Then go into your email settings and force a logout of all active sessions.

  Also enable two-step authentication on your WordPress.com account as @staartmees explained above. With that someone would need access to both your email account and your phone before they’d be able to log in.