Improve your forum password and account security

[Scaredgirl]

We've had some reports of outsiders trying to access accounts on this forum by trying to guess the password.

This might be a good time to change your account password if you are using one of the following (or similar):

"password"
"123456"
"(same as forum username)"
"elements"
etc.

To change your password, go to Account Settings (http://elementscommunity.org/forum/index.php?action=profile;area=account) of your profile and scroll down to the bottom of the page.


If your password is something that isn't easy to guess, you have nothing to worry about. But if you want even more security, you can bind an account to an IP address or multiple IP addressed preventing people from logging into the account if they are not in your allowed IP addresses. You can find it in Account Settings (http://elementscommunity.org/forum/index.php?action=profile;area=account) under "IP Address Account Protection". <-- under construction.

[Kuroaitou]

Good post - you should probably add something involving language as well. I have to say that passwords in non-English languages (especially ones that have odd accent marks, punctuation symbols, etc.) are also good things to include in your password to really confuse people.

[BluePriest]

Is it possible to either block IP or trace users from the same IP? We know you will do this if it is possible, but it would be nice to know aside from what we can do what you can do as well.

ps. Using asc II keys is a great password Æ£k½♠

No one would ever guess that. and no, its not my password 

edit ninjad

[Sir Rebrl]

if you want even more security, you can bind an account to an IP address or multiple IP addressed preventing people from logging into the account if they are not in your allowed IP addresses. You can find it in Account Settings (http://elementscommunity.org/forum/index.php?action=profile;area=account) under "IP Address Account Protection".

That's an awesome feature I don't think I've seen on a forum before. That's good to know about, much thanks for posting this. ^_^

[Dragoon1140]

But if you want even more security, you can bind an account to an IP address or multiple IP addressed preventing people from logging into the account if they are not in your allowed IP addresses. You can find it in Account Settings (http://elementscommunity.org/forum/index.php?action=profile;area=account) under "IP Address Account Protection".

Wow, that is actually a pretty awesome feature.  I can't imagine anybody losing their account once this knowledge is spread and used correctly, which is always nice.

Great idea creating this thread too, since I've heard many, many people in chat saying they have been receiving "account login failure" emails.

[TheCrazyMango]

Great idea creating this thread too, since I've heard many, many people in chat saying they have been receiving "account login failure" emails.

I have a feeling that those emails might have been the sole reason for this thread. I might be wrong though...

[Sir Rebrl]

Maybe I'm blind but I can't find the IP Address Account Protection under Account Settings.

[TimerClock14]

Maybe I'm blind but I can't find the IP Address Account Protection under Account Settings.

I cannot find it as well

[Sir Rebrl]

Oh my God the blindness is spreading!

Anyway, could it be an option available only to admins since admins are typically the only members with IP control in a forum?

[Scaredgirl]

Maybe I'm blind but I can't find the IP Address Account Protection under Account Settings.

I cannot find it as well

Yeah, it's bugged somehow. It works for "Scaredgirl" account, but not my other dummy account. Settings should be ok so I think I have to reinstall the plugin to make it work. Unfortunately I have to go out for a few hours so it won't get fixed just yet.

Hopefully we'll have it up and running later tonight.

Anyway, could it be an option available only to admins since admins are typically the only members with IP control in a forum?

Nope. Everyone should be able to do it.

[Appawesome]

Well obviously I should change my password from 456789

[Bloodshadow]

What if a hacker hacks into your account and binds the account to his/her IP instead of yours? Then aren't you screwed?