Neopets To Implement Security Questions (finally)

[kittyray]

From Xwitter:

(you need an account to see links)

Exciting news, Neopians! We've revamped our account recovery process with improved security procedures, new account types and an appeals channel! 🌟

(you need an account to see links)

As of September 2023, the account retrieval process will use updated security questions to verify account ownership. The number of security questions required during the retrieval process depends on whether the account is classified as standard or sensitive.



Standard accounts are those held by the average Neopets player. These accounts are unlikely targets for theft and require basic security measures during the account recovery process.



Sensitive accounts are those with large amounts of Neopoints or NeoCash, unique Neopets, desirable usernames, or other factors that could make the account a target for theft. Sensitive accounts have enhanced security measures in place and require an additional set of security questions answered correctly to regain access.


If users are still unhappy with the outcome after going through this process, they now have the option to request an appeal. A Customer Support Supervisor will carefully reevaluate the details of your case and provide a comprehensive resolution within 14 business days. Be sure to include your original ticket number.

additional comment from Willow via $(you need an account to see links):

Security is a shared responsibility. The Neopets Team strongly encourages users to take proactive measures like setting up a PIN and enabling two-factor authentication. To learn more about enacting these measures, please visit support.neopets.com and check out the Account/Login Issues section.

[edit] So far I can't find out where any of these security questions are.

[gabigabmitch]

This is what Willow just posted on the discord as well:

After listening closely to community feedback and concerns, we're excited to share that we've made some major improvements to the Neopets account recovery policy. Yes, you read that right—we're talking about a full revamp of the account retrieval process developed with both simplicity and security in mind.

Here's what's new:

Updated Account Verification Process: The updated account retrieval process uses a new set of security questions to verify account ownership. The information you are required to provide during the retrieval process depends on whether the account is classified as standard or sensitive.

Standard accounts are those held by the average Neopets player. These accounts are unlikely targets for theft and require basic security questions to be answered correctly during the account recovery process.

Enhanced Security Questions for Sensitive Accounts: Sensitive accounts are those with a considerable amount of Neopoints or NeoCash, unique pets, desirable usernames, or other factors that could make the account a target for theft. Sensitive accounts have enhanced security measures in place and require additional information to regain access.

Account Recovery Appeals Channel: If users are still unhappy with the outcome after going through this process, they now have the option to request an appeal. A Customer Support Supervisor will carefully reevaluate the details of your case and provide a comprehensive resolution within 14 business days.

Security is a shared responsibility. The Neopets Team strongly encourages users to take proactive measures like setting up a PIN and enabling two-factor authentication. To learn more about enacting these measures, please visit support.neopets.com and check out the Account/Login Issues section.

Fair Neopians, we are endlessly grateful for your patience, feedback, and support as we work to improve both the account retrieval process and the Neopets experience.

---------- Post added at 01:13 PM ---------- Previous post was at 12:48 PM ----------

I can confirm as of about 4 hours before this was posted, they were still requiring tickets to be sent in from the original email address for some accounts. So I'm not sure when exactly this was implemented. No security questions were asked in my case, just the request from the original email. That came from Blake, for what that's worth.

[Infected]

This is a good step towards more account security. In hindsight it feels so simple and straightforward as security questions have been around forever now. But good news nonetheless in my opinion.

[♥ SomeClown ♥]

If I can't answer "First pet" with "shiddybriches" I quit...we need REAL security around here.

[Cinnamoroll]

I’m curious to see what these “security questions” actually are.

And how would it work for accounts that haven’t been accessed in some time?

Better late than never though, I guess…?

[Bat]

Neat. Even more confidential information for them to store in plain text in a database that is skimmed on a daily basis by a hacker that they refuse to do anything about. Thanks for listening to our feedback, Neopets team.

[orangebytes]

Neat. Even more confidential information for them to store in plain text in a database that is skimmed on a daily basis by a hacker that they refuse to do anything about. Thanks for listening to our feedback, Neopets team.

That's what I thought too.

[Buizel]

Neat. Even more confidential information for them to store in plain text in a database that is skimmed on a daily basis by a hacker that they refuse to do anything about. Thanks for listening to our feedback, Neopets team.

Can't wait for the reddit post in a month showcasing findings from Neo's backend that no one asked for!

[Habanero]

Can't wait for the reddit post in a month showcasing findings from Neo's backend that no one asked for!

I'd rather finally learn what the blue and yellow lutari beads were supposed to do.

[DarkSkies]

Ohh I didn't remember about n_t certainly a bummer to have more info exposed