You know that my Password is compromised ?

[JustShoot]

An Announcement , sent from a big anonymous Question Mark ?
And Why ??? , do you think it is compromised on 41 other accounts . Is your NWfirarms site compromised and Phishing ???

screen shot :
-

-

-

Read More

 

[Kruel J]

@Joe Link

 

[CountryGent]

New one too me.

 

[PiratePast40]

I occasionally get that kind of stuff about various accounts. Unless it's from a trusted site, it's spam or phishing. You'll notice that they almost always want you to you sign on their site using your XYZ account password. Probably the Ethiopian Prince telling you that you're the secret heir to a fortune.

 

[AMT]

Logged in a while ago and had the same message under my "alerts" tab. I also sent a message to @Joe Link .

Only happened when i logged into NWFA today.

 

[SOrez]

I received the same alert. I went to security and it didn't reconize my password.

 

[CountryGent]

Have to revise what I said above. Just now I logged out, cleared browser, came back in, did the two step verification and:



Message shown on a Windows 10 workstation running the latest release of Chrome. (And, yes, I changed my password here.)

 

[Diamondback]

Should we be panicking? Could this have something to do with this morning's maintenance?

 

[Blackwatch]

It's a pain but frankly a unique password should be used for every account. Then such messages can quickly be classed as bogus.

 

[ATCclears]

Could it be the software used for this website has a new feature that is checking against a central database?

 

[The Heretic]

Or it could be someone found a way to send that message to you without displaying a username?

 

[Joe Link]

Update: More info about this and other topics related to account security can now be found here:

Login and Security

Help topics related to logins and account security.

www.northwestfirearms.com

----

Apologies for the panic everyone, this is part of the update this morning and our ongoing work to keep our members safe. I planned to announce this with some other security updates, but I'll post a bit about it here.

This new feature checks user passwords against a database of 613,584,246 real world passwords previously exposed in data breaches. Hackers, scammers, and other bad actors use these same databases along with automated bots to attempt to gain access to accounts (they already know your username). If you receive this alert, your password is no longer suitable for use and should not be considered secure. You will continue to receive alerts each time you log in until it is changed. As mentioned, you should use a different password for each site you log into along with a password manager to maintain them.

While there are many password managers out there, I highly recommend using Bitwarden. It's completely free, open source, and once you've installed it on your computer(s) and mobile device(s) it can synchronize passwords between them (so you won't lose all your passwords in case something happens to one of them). If you're one of the more tech savvy here, you're probably already using 2FA. If not, you should be. Those who aren't familiar with it should look into it before enabling it on your account, as an unrecoverable account situation is possible if things go wrong.

I've spoken with quite a few members who either aren't too concerned about an account compromise here or don't believe their accounts would be targeted.

Two things on this:

1. These hackers, scammers, etc. are constantly evolving, and usually when you know why you were targeted, it's too late. Without divulging too much information, these people would love to get their hands on most of the accounts here; and when they do they won't be posting memes. We have thousands of malicious attempts here every single day.
2. If your account is compromised, it will be locked. In all likelihood, we do not have enough information about you to safely recover your account.

I don't mean to sound all doom and gloom folks, but things on the internet are bad, and they're only getting worse. Be proactive and stay safe.

 

[msgriff]

Apologies for the panic everyone, this is part of the update this morning and our ongoing work to keep our members safe. I planned to announce this with some other security updates, but I'll post a bit about it here.

This new feature checks user passwords against a database of 613,584,246 real world passwords previously exposed in data breaches. Hackers, scammers, and other bad actors use these same databases along with automated bots to attempt to gain access to accounts (they already know your username). If you receive this alert, your password is no longer suitable for use and should not be considered secure. You will continue to receive alerts each time you log in until it is changed. As mentioned, you should use a different password for each site you log into along with a password manager to maintain them.

While there are many password managers out there, I highly recommend using Bitwarden. It's completely free, open source, and once you've installed it on your computer(s) and mobile device(s) it can synchronize passwords between them (so you won't lose all your passwords in case something happens to one of them). If you're one of the more tech savvy here, you're probably already using 2FA. If not, you should be. Those who aren't familiar with it should look into it before enabling it on your account, as an unrecoverable account situation is possible if things go wrong.

I've spoken with quite a few members who either aren't too concerned about an account compromise here or don't believe their accounts would be targeted.

Two things on this:

1. These hackers, scammers, etc. are constantly evolving, and usually when you know why you were targeted, it's too late. Without divulging too much information, these people would love to get their hands on most of the accounts here; and when they do they won't be posting memes. We have thousands of malicious attempts here every single day.
2. If your account is compromised, it will be locked. In all likelihood, we do not have enough information about you to safely recover your account.

I don't mean to sound all doom and gloom folks, but things on the internet are bad, and they're only getting worse. Be proactive and stay safe.

Good to hear. I'm running out of porn star name passwords, and I'm getting too old for more "research".

 

[BlindedByScience]

While we're on the subject, I use a very good random password generator that stores them in a heavily encrypted local database. Used it for years, never been hacked. Set it to generate weird length passwords like 13 or 17 characters, and throw some special characters in for good measure. Very secure, very easy to recommend. Here's the best part....it's free:

Password Safe

 

[po18guy]

Nothing at all happened to my account early this morning. I was asleep. And, even when I woke up it was fine.

 

[JustShoot]

Apologies for the panic everyone, this is part of the update this morning and our ongoing work to keep our members safe. I planned to announce this with some other security updates, but I'll post a bit about it here.

This new feature checks user passwords against a database of 613,584,246 real world passwords previously exposed in data breaches. Hackers, scammers, and other bad actors use these same databases along with automated bots to attempt to gain access to accounts (they already know your username). If you receive this alert, your password is no longer suitable for use and should not be considered secure. You will continue to receive alerts each time you log in until it is changed. As mentioned, you should use a different password for each site you log into along with a password manager to maintain them.

While there are many password managers out there, I highly recommend using Bitwarden. It's completely free, open source, and once you've installed it on your computer(s) and mobile device(s) it can synchronize passwords between them (so you won't lose all your passwords in case something happens to one of them). If you're one of the more tech savvy here, you're probably already using 2FA. If not, you should be. Those who aren't familiar with it should look into it before enabling it on your account, as an unrecoverable account situation is possible if things go wrong.

I've spoken with quite a few members who either aren't too concerned about an account compromise here or don't believe their accounts would be targeted.

Two things on this:

1. These hackers, scammers, etc. are constantly evolving, and usually when you know why you were targeted, it's too late. Without divulging too much information, these people would love to get their hands on most of the accounts here; and when they do they won't be posting memes. We have thousands of malicious attempts here every single day.
2. If your account is compromised, it will be locked. In all likelihood, we do not have enough information about you to safely recover your account.

I don't mean to sound all doom and gloom folks, but things on the internet are bad, and they're only getting worse. Be proactive and stay safe.

Malicious Bastards ... Have no doubt they are beating on your firewall 24/7, and it's an endless job to keep them out .
.

 

[Stomper]

For my commercial work accounts, I comprise a list of ridiculous non-sense phrases that contain alpha-numeric and special characters, concocted from my dubiously devious mind…. then I rotate them every month.


Stupid things along the lines of (but NOT actually these)….


Xi-Xing-Pin9_p0ng

Ll@ma-Llam@_ding-D0ng

St€€nkyPe@te_w/10towS

M00sey\F@yte&sKwirleyQ

BiD€n-bLowz&u-@LL-n0

 

[Diamondback]

For my commercial work accounts, I comprise a list of ridiculous non-sense phrases that contain alpha-numeric and special characters, concocted from my dubiously devious mind…. then I rotate them every month.


Stupid things along the lines of (but NOT actually these)….


Xi-Xing-Pin9_p0ng

Ll@ma-Llam@_ding-D0ng

St€€nkyPe@te_w/10towS

M00sey\F@yte&sKwirleyQ

BiD€n-bLowz&u-@LL-n0

34t@d1ckP3d0J03

 

[Flopsweat]

 

[ezra1]

I changed my password as requested using my desktop which goes through a VPN but now when using my phone connected to home wi-fi it says my ip is blocked. Any suggestions?