Unauthorised password change – cannot access my website

  • Unknown's avatar

    Hello!

    Recently, I have received emails saying that my WordPress password was changed. Because we are a student association, there are several people who might have the access to the password. However, no one from the organization did it.

    Now, I cannot access isrotterdam.com in wordpress. I have tried using the ‘lost password’ button, but that page was not found. I then, went to WordPress.com and changed my password there. However, it only works on wordpress and not when I login to isrotterdam.com/login.

    Could you please assist me? This issue is significant to our ticket sales!

    Sincerely,
    Erkaiym Saparalieva

    The blog I need help with is: (visible only to logged in users)

  • Hi there,

    Apologies, but we can’t help with your issue directly because we don’t host isrotterdam.com on our WordPress.com managed hosting.

    To explain, we are a fully managed hosting provider and use a custom server environment that is optimized for WordPress, provides built-in security and performance improvements, as well as in-house support for your site questions. You can learn more about the performance and security benefits of our managed hosting here: https://wordpress.com/hosting/

    Because of the way we’ve optimized our service, we also use a customized version of WordPress that is different (under the hood) from what you use at your current provider. As a result, we do not have access to your site and are not familiar with the source of your issue.

    You definitely have the option to move your site to us so we can provide in-house help, and we offer a migration plugin that will help you move your site to our managed hosting in just a few clicks.

    WP
    Import using Move to WordPress.com
    3 min read
    The Move to WordPress.com plugin allows you to start migrating a self-hosted WordPress site to WordPress.com directly from the self-hosted site. Prerequisites The Move to WordPress.com plugin installed on your self-hosted WordPress site. Jetpack version 7.9 or higher activated on the self-hosted site. All incompatible plugins deactivated on the self-hosted site. ✅ Th

    Unfortunately though, as it stands now, we are not able to help since it is hosted elsewhere. The good news is that help is available here at the open-source WordPress forums: https://wordpress.org/support/forum/how-to-and-troubleshooting

    The folks in that forum are more familiar with these kinds of issues and are in the best position to help. Thanks!

  • Unknown's avatar

    Hello!

    Thank you for your reply.

    I still have a question that I think is WordPress-relevant. I keep receiving a notification that my user password is changed, but I have not been changing it. Why could that happen?

  • Hello there,

    I keep receiving a notification that my user password is changed, but I have not been changing it. Why could that happen?

    Is this for http://www.isrotterdam.com?

    If yes, it sounds like a bot may be targeting the password reset page… This is where a password reset request is sent, but a password is not actually changed as a result.

    Many thanks in advance.

  • Unknown's avatar

    Yes, it is for http://www.isrotterdam.com!

    Weirdly, we do not receive a request to change a password, but rather a message/statement that it was changed:

    “Password changed for user: [user name]”

    After the first message like this, the password I would normally use to log in is not working. What can I do?

  • Unknown's avatar

    Hello Totoro,

    Could you please help us? I have the same issue that is definitely WordPress related, and not up to the hosting service we are using.

    The password for the user of isrotterdam.com is still being changed without our consent. What can we do?

    It has been a long time since your last reply, and I cannot reach you through email or any other way.

  • The topic ‘Unauthorised password change – cannot access my website’ is closed to new replies.