Changing passwords in the accounts.

[hatzisn]

I have seen the notification at the top of the forum and even though my password was kind of strong enough I upgraded it to level final boss.
I wonder though. Why should the accounts and posts be deleted? There is a much easier way as can be seen here:

XF 2 Tip - Password Reset Query 2018-12-04

You can use this query to reset a user's password. It is especially useful if you forget your admin password. You need to replace new-password and 1 (the user_id). You don't have to change salt, but if you do then both instances need to be the...

enxf.net

 

[EnriqueGonzalez]

My guess is that

Why should the accounts and posts be deleted?

Erel doesnt have the time to cherry pick the real posts of the user from the wrong posts so its faster to nuke them.

Also i guess there are some accounts that hasnt been used and reaching the holder may be impossible

 

[hatzisn]

I suppose you may be right but let's imagine f.e. that someone's account with a lot of contributions in the forum get's hacked. Creating a flood to wash a table will render the forum poorer each time. Let's take f.e. @Johan Schoeman . What would have happened if his account got hacked? Wouldn't we have lost all his libraries and examples?

 

[EnriqueGonzalez]

What would have happened if his account got hacked?

i understand your concern, and i hope most of us daily users after looking at that banner updates our password and that scenario never happens

 

[LWGShane]

It should also be recommend (not required) that users also enable 2FA on their accounts too.

My password was already strong but I've generated an even stronger password along with enabling 2FA.
I use BitWarden to generate passwords.


CC: @Erel

 

[Daestrum]

My password was weak, I must admit.
Now it's a strong password, so safe in fact ,that even I don't know what it is. (Luckily Edge does as it created it. lol)

 

[hatzisn]

It should also be recommend (not required) that users also enable 2FA on their accounts too.

My password was already strong but I've generated an even stronger password along with enabling 2FA.
I use BitWarden to generate passwords.


CC: @Erel

I did not know there was 2FA in this forum. Thanks for the tip. I have activated it.