Conversation

Notices

1. Embed this notice
   Bronwyn Harris (bronwyn@sfba.social)'s status on Tuesday, 01-Oct-2024 06:17:50 JST Bronwyn Harris

   There's someone who has an instagram handle one character off from mine and apparently put my email (similar to the IG handle) as their recovery email. For about a year, I've gotten at least 1-2 "here's how to reset your IG password" email per week

   The first couple times, I reset my password. I'm not resetting my password twice a week for the rest of my life.

   Is this someone who is just super optimistic that THIS time the password reset will send to her or is this some kind of scam?

   • Embed this notice
     Philip Weiss (Phil in SF) (kingrat@sfba.social)'s status on Tuesday, 01-Oct-2024 06:17:49 JST Philip Weiss (Phil in SF)

     in reply to

     @Bronwyn could be both or either.

   • Embed this notice
     Bronwyn Harris (bronwyn@sfba.social)'s status on Tuesday, 01-Oct-2024 06:20:06 JST Bronwyn Harris

     in reply to

     • Philip Weiss (Phil in SF)

     @kingrat well, since I'm not willing to change my password twice a week, I guess I just hope it's nothing terrible.

   • Embed this notice
     Philip Weiss (Phil in SF) (kingrat@sfba.social)'s status on Tuesday, 01-Oct-2024 06:55:45 JST Philip Weiss (Phil in SF)

     in reply to

     @Bronwyn definitely don't change your password when the reset email isn't one you requested

   • Embed this notice
     Bronwyn Harris (bronwyn@sfba.social)'s status on Tuesday, 01-Oct-2024 06:56:16 JST Bronwyn Harris

     in reply to

     • Philip Weiss (Phil in SF)

     @kingrat I didn’t do it through the link or anything. I did it later

   • Embed this notice
     Philip Weiss (Phil in SF) (kingrat@sfba.social)'s status on Tuesday, 01-Oct-2024 07:14:43 JST Philip Weiss (Phil in SF)

     in reply to

     @Bronwyn I pretty much ignore password reset emails completely, unless I specifically requested them. I don't change my password in response to them, even later. Getting those emails when I didn't request them means that someone *hasn't* gotten into my account. (I have 20 character random passwords managed by a password manager though.)

     The one thing I do if I get a spate of reset emails, I verify that I can get into my account. If I can't then I was actually hacked. But changing my password in response doesn't make my account more secure.

   • Embed this notice
     Bronwyn Harris (bronwyn@sfba.social)'s status on Tuesday, 01-Oct-2024 07:17:25 JST Bronwyn Harris

     in reply to

     • Philip Weiss (Phil in SF)

     @kingrat makes sense.

     And I rarely do anything from links in email because I'm paranoid