WordPress.com login screen not secure?

• 

  empwrddstny · Member · Apr 30, 2014 at 11:25 pm

  • Copy link
  • Add topic to favorites

  Has anyone else noticed the main WordPress.com login screen is not encrypted? Kind of makes me nervous to input my username & password, but I have to be able to get into my blog somehow for the time being (and to notify you guys of the issue)…. :-/

  Any idea what gives with this, because it seems to me like a security issue waiting to happen?

  The blog I need help with is: (visible only to logged in users)

• 

  shawnajroberts · Member · May 2, 2014 at 4:09 pm

  • Copy link

  Hi there!

  I can assure you that all sensitive information such as passwords are always encrypted when sent over the network. The login form on the WordPress.com front page submits to a https page, so your username and password are sent encrypted, then redirects back to an unencrypted page.

  We take security very seriously at WordPress.com and greatly appreciate receiving notification of any security flaws. If you believe you have found a security issue, please submit your findings.

  Let me know if I can help further!