Page 1 of 2 12 LastLast
Results 1 to 10 of 14

Thread: New Password Reset on Neopets

  1. #1
    esperanto's Avatar
    Joined
    Apr 2012
    Posts
    1,042
    Userbars
    6
    Thanks
    510
    Thanked
    742/409
    DL/UL
    23/0
    Mentioned
    368 times
    Time Online
    23d 14h 15m
    Avg. Time Online
    8m

    New Password Reset on Neopets

    Copied from JellyNeo.

    If you read New Features on Thursday, you would have noticed that Neopets is releasing a new password reset feature, and we're happy to announce that the feature is active! We thought we'd explain the new feature a bit and the security benefits that comes with it.

    First off, we'd like to applaud Neopets on releasing this new way of resetting passwords. It's much, much more secure than the old system and has quite a few modern security features.

    New Flow:
    To start off, to reset your password, you can click the "Forgot password?" link on the login box on Neopets.com.
    You must provide your Neopets username to make sure it exists, and if it does, then you must enter a CAPTCHA to confirm you'd like a change.
    You then receive an email with a special, unique link to reset your password. You also have the option to click a second link that cancels the reset and voids the link.
    When you click on the link to reset, you are asked for your username.
    After confirming your username, you are then asked for a new password.
    A successful reset will get you a second email in your inbox letting you know a change was made.

    Security Benefits:
    The best improvement here is that your password is no longer sent via email! Email is not very secure at all, and can be easily intercepted on its way from Neopets.com to your inbox. Sending your raw password was honestly a pretty terrible system, and we're delighted Neopets has changed it.
    Another benefit of not being sent your old password is that a hacker will never know what it was in the first place, which can be helpful if you use the same password on multiple websites. (Which is a BIG NO-NO.)
    When requesting a new password, you're also asked for a CAPTCHA, which should reduce the number of bots sending password requests.
    When you click the link to reset your password, asking to confirm your username is a great extra step to prevent scammers from trying to guess random password reset URLs.
    You also have the option of canceling a request to prevent others from using your password reset URL.
    There are probably a few other things we're missing too.



  2. The Following User Says Thank You to esperanto For This Useful Post:

    DarkAngel (01-06-2013)

  3. #2

    Mod's Avatar
    Joined
    Nov 2012
    Posts
    2,800
    Userbars
    7
    Thanks
    1,563
    Thanked
    4,717/2,508
    Mentioned
    1,368 times
    Time Online
    131d 12h 4m
    Avg. Time Online
    45m
    Is this actually active?

    Last night I forgot the pw to one of my accounts, so I entered in email and they still sent me back my old pw with my username.

  4. #3
    Bettser's Avatar
    Joined
    Feb 2012
    Posts
    6,027
    Userbars
    30
    Thanks
    1,791
    Thanked
    3,790/1,690
    DL/UL
    41/0
    Mentioned
    1,446 times
    Time Online
    368d 17h 50m
    Avg. Time Online
    2h 7m
    This is a very, very sad day for a lot of users on here and past programs

  5. The Following User Says Thank You to Bettser For This Useful Post:

    sharingan (01-06-2013)

  6. #4
    esperanto's Avatar
    Joined
    Apr 2012
    Posts
    1,042
    Userbars
    6
    Thanks
    510
    Thanked
    742/409
    DL/UL
    23/0
    Mentioned
    368 times
    Time Online
    23d 14h 15m
    Avg. Time Online
    8m
    Quote Originally Posted by Mod View Post
    Is this actually active?

    Last night I forgot the pw to one of my accounts, so I entered in email and they still sent me back my old pw with my username.
    JellyNeo confirms it is.



  7. #5
    Nath's Avatar
    Joined
    Mar 2012
    Posts
    1,834
    Userbars
    13
    Thanks
    1,177
    Thanked
    1,284/611
    DL/UL
    30/0
    Mentioned
    343 times
    Time Online
    286d 17h 43m
    Avg. Time Online
    1h 38m
    I saw some changes had been implemented earlier today when checking a couple accounts.

  8. #6

    Joined
    Nov 2012
    Posts
    176
    Userbars
    2
    Thanks
    21
    Thanked
    65/48
    DL/UL
    23/0
    Mentioned
    15 times
    Time Online
    23d 14h 2m
    Avg. Time Online
    8m
    it just mskes an extra step just have to get the username from here (you need an account to see links)

  9. #7
    Nath's Avatar
    Joined
    Mar 2012
    Posts
    1,834
    Userbars
    13
    Thanks
    1,177
    Thanked
    1,284/611
    DL/UL
    30/0
    Mentioned
    343 times
    Time Online
    286d 17h 43m
    Avg. Time Online
    1h 38m
    Quote Originally Posted by __darkmaster View Post
    it just mskes an extra step just have to get the username from here (you need an account to see links)
    You can still request the username here:

    (you need an account to see links)

  10. #8

    Joined
    Nov 2012
    Posts
    176
    Userbars
    2
    Thanks
    21
    Thanked
    65/48
    DL/UL
    23/0
    Mentioned
    15 times
    Time Online
    23d 14h 2m
    Avg. Time Online
    8m
    yah im guessing that will be patched soon as they relize its still there lol.. mayb they will patch petpet as well i guess

  11. #9
    tchaikovsky's Avatar
    Joined
    Aug 2012
    Posts
    690
    Userbars
    9
    Thanks
    86
    Thanked
    197/121
    DL/UL
    19/0
    Mentioned
    61 times
    Time Online
    8d 21h 18m
    Avg. Time Online
    3m
    Yup, it will. I'm fairly sure they're implementing this for the sole reason of doing away with most of inactive account farming abilities, and that means full usage of the new system.

  12. #10

    Joined
    Nov 2012
    Posts
    176
    Userbars
    2
    Thanks
    21
    Thanked
    65/48
    DL/UL
    23/0
    Mentioned
    15 times
    Time Online
    23d 14h 2m
    Avg. Time Online
    8m
    ah well ill just go back to my multi flps.. worked wonders b4 and now ill have more of a market for my shells

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •