How to protect your Bitcointalk account from getting hacked.

[Z_MBFM]

This is not a special security tip. If you want to keep your account secure, then only secure your Bitcoin address, which is the address you will use first in the account. Then you can recover your account in any situation if your account is hacked. Another common thing is to use a strong password and 2FA, which is required on all platforms. So I don't think anyone needs to be taught these things again. This forum is totally safe. If you are the real owner, then of course you can verify the ownership of your account and get your account back. It is much easier for the real owner to recover the account.

[Wiwo]

This is not a special security tip. If you want to keep your account secure, then only secure your Bitcoin address, which is the address you will use first in the account. Then you can recover your account in any situation if your account is hacked. Another common thing is to use a strong password and 2FA, which is required on all platforms. So I don't think anyone needs to be taught these things again. This forum is totally safe. If you are the real owner, then of course you can verify the ownership of your account and get your account back. It is much easier for the real owner to recover the account.

The good thing is thaz bitcointalk now have 2fa security levels and this give the users the freedom activate access to the accounts with the input of that code base on the availability of the code and it products,

If you have 2FA enabled.

[DYING_S0UL]

Among all the points you mentioned, in my opinion, shaking an address is the most important one. Because no matter how strong the password we create, it can still be hacked through various methods like phishing or social engineering. As for 2FA, it too can be compromised. The same goes for email security, not to forget the times when the forum's database was breached. So if we can ensure the security of our staked address, then I believe we have nothing to fear. Because at the end of the day, when our account gets compromissed, the forum will ask to prove ownership through signing a message (only). Not email, not password but signed msg from staked address.

[Wiwo]

Among all the points you mentioned, in my opinion, shaking an address is the most important one. Because no matter how strong the password we create, it can still be hacked through various methods like phishing or social engineering. As for 2FA, it too can be compromised. The same goes for email security, not to forget the times when the forum's database was breached. So if we can ensure the security of our staked address, then I believe we have nothing to fear. Because at the end of the day, when our account gets compromissed, the forum will ask to prove ownership through signing a message (only). Not email, not password but signed msg from staked address.

Address verification is one of the internal security measures that we have around and sure we have some factors that could be a limitations to address staking and verification as means of implementing securing for accounts, that been said.

Is very ok for us to apply all the necessary securities measures and if anything haoones at least one or all the security features will help recover and keep our accounts at safety.

[Rockstarguy]

1. Use a very strong password:
If you know you didn't use a wrong password please change it now to a very strong password use the forgotten password option and then change it, use a mix of latter's, numbers and symbols to create a strong password.

Using a strong password is very important, but it doesn't stop there. After having a strong password, it is crucial to store it in a safe place where only you can access it.

Some people see email and other store managers as the best places to store passwords, but this is the easiest way for others to gain access. Having a strong password and not storing it properly can lead to poor security, making the strength of the password unnecessary.

[tvplus006]

I created this thread to help newbies secure their account so they won't get hacked

I wonder why a hacker would want to hack a newbie account when they can literally create a new account, make a few posts, and become a newbie just like that...

OP wants to help newcomers at an early stage of their interaction with the forum, so that when they become legendary, mistakes made during registration do not lead to the loss of an account years later. Although these tips can be used not only by beginners, but also by holders of other ranks, if for some reason they did not take care of the safety of their account earlier.

[Patikno]

3. Secure Your Email Account linked to your forum account:
That Email that is linked to that your forum account is the pass key to your account because if someone gets hold of your email account they can use the forgotten option and when a link is sent to your email they can easily change your password through that and your forum account is gone.
So secure your Email that is linked to that your Bitcointalk forum account very well in fact use a strong password and 2FA for your email.

Do not make you email visible in your profile if you decide to add it.
There is a security question and answer in the profile section that you can do to add an extra layer of security.

Lastly and most importantly, do not sign in your account on any device particularly those ones that are not your own like in a public computer in a library, a cafe, or even in a friend's house. While you trust your friend, you do not know your friend's friend.

Your excellent additional advice is important, especially for beginners. If we decide to display our email address publicly on our profile, there is a potential for attacks, such as hacking attempts, or receiving phishing emails. While this might not be a problem for experienced users, but it can be problematic for beginners if they aren't careful, or maybe careless when receiving threats. Therefore, I strongly advise everyone to do this, especially for beginners. Furthermore, I recommend storing our forum login information securely, just like we keep our seedphrase, or private key, to prevent any unwanted incidents affecting our account, and follow some of the security tips that OP has provided.

[pancelot]

3. Secure Your Email Account linked to your forum account:
That Email that is linked to that your forum account is the pass key to your account because if someone gets hold of your email account they can use the forgotten option and when a link is sent to your email they can easily change your password through that and your forum account is gone.
So secure your Email that is linked to that your Bitcointalk forum account very well in fact use a strong password and 2FA for your email.

Do not make you email visible in your profile if you decide to add it.
There is a security question and answer in the profile section that you can do to add an extra layer of security.

Lastly and most importantly, do not sign in your account on any device particularly those ones that are not your own like in a public computer in a library, a cafe, or even in a friend's house. While you trust your friend, you do not know your friend's friend.

Your excellent additional advice is important, especially for beginners. If we decide to display our email address publicly on our profile, there is a potential for attacks, such as hacking attempts, or receiving phishing emails. While this might not be a problem for experienced users, but it can be problematic for beginners if they aren't careful, or maybe careless when receiving threats. Therefore, I strongly advise everyone to do this, especially for beginners. Furthermore, I recommend storing our forum login information securely, just like we keep our seedphrase, or private key, to prevent any unwanted incidents affecting our account, and follow some of the security tips that OP has provided.

I totally agree with Patikno. Posting an email address is maybe insignificant, but the punishment is extremely harsh, especially for newcomers who do not yet have a clue regarding various types of cybercrime. In addition to hiding email addresses and shielding logins, I believe it is also recommended to use 2FA. With 2FA, even if a person can get access to our password, the account remains secure because there is an additional step of verification required. In addition to that, we can also use a password manager so that we are not hassled with remembering lots of passwords, and to avoid the risk of having one password on multiple platforms. These small details really make a big difference in security and make it easier for beginners to feel comfortable while learning.

[bitbollo]

I would add a basic suggestion, seems banal but isn't... dont use fake email as recovering and leave in public!
Sometimes I have seen people creating these adrress just for recovering these account (imagine fake gmail accounts that could be created in a few hours).
I would find a stacked message essential for recovering/protect the account...

[lovesmayfamilis]

OP wants to help newcomers at an early stage of their interaction with the forum, so that when they become legendary, mistakes made during registration do not lead to the loss of an account years later. Although these tips can be used not only by beginners, but also by holders of other ranks, if for some reason they did not take care of the safety of their account earlier.

That's right. There have been many stories of high-ranking accounts being hacked. If you dig through the history, you'll see that some were redirected to a phishing link that mimicked a forum. People clicked what appeared to be a legitimate forum link, but the next step was to log out and re-enter their password. It's a fairly simple way to hijack an account. Therefore, I would add a warning to the OP's post: never trust any links, and be wary even of those you think you trust who send you a supposedly useful forum link. That's exactly how phishing works.

[OcTradism]

Even Laszlo Hanyecz account was recently restored to the man (if anyone is not aware of it).

Here is evidence.
https://bpip.org/Profile?id=143
Likely laszlo forgot his account password and had to go through manual account recovery procedure. No information that his account was hacked.

There is a security question and answer in the profile section that you can do to add an extra layer of security.

This can trigger a lock on your account and I don't like this option and I would like to set up my account password, my email password strongly as well as maintain good habit on the Internet.
PSA: ACCOUNTS WILL BE LOCKED IF THE SECRET QUESTION IS USED TO RECOVER IT.

[knowngunman]

Lastly don't rent your Bitcointalk account to anyone and don't use people's wifi to login your account and don't click on some link sent to you in PM, be very careful and enjoy the forum.

Rent account? Do people actually rent out their forum account? This is the first time I'm hearing this thou. I still can't figure out how practicable this can be because the renter can easily change the account information and you'll lose every access. Moreover, I don't see the purpose of renting out account in the first place because if it is money they care about, they can get it from signature campaign when they are up to rank to participate. Is there anyone that can be foolish enough to rent account more than what the campaign is paying? Someone should make this make sense to me please.

Clicking on link is the easiest way scammers carry out their scams this day. They can clone a link to make it look genuine and once you click it, you've compromised your account. Not only in the forum but in every platform, avoid clicking on random links.

[tbct_mt2]

This is not a special security tip. If you want to keep your account secure, then only secure your Bitcoin address, which is the address you will use first in the account. Then you can recover your account in any situation if your account is hacked.

A staked Bitcoin address is one of proofs you can use for account recovery but if a person is careless enough to get his account hacked, I don't know whether his Bitcoin wallet on a same device was not compromised too.

At least, this gives an extra way to recover an account but it's important to keep a device clean, non compromised so that your Bitcoin wallet, your Bitcoin forum account are all safe. In addition, it's important that address used for stake as an account ownership proof can be an empty wallet so that if it was compromised, you won't lose any bitcoin, just lose account ownership proof.

Because if you use a same device to store that wallet and to use your forum account, it's a hot wallet that is unsafe for storage your bitcoin.

[retreat]

These are tips that users, especially beginners, should know, as there have been several incidents where accounts have been hacked due to a lack of precautions. At least points 2, 3, and 4 are essential. Since we never know when a bad incident will happen, at least we can take precautions to prevent our accounts from falling into the wrong hands.

2. Enable 2FA (Two-Factor Authentication):
There's an option available for Two-Factor Authentication in Bitcointalk forum so it is very good that you use a Two-Factor Authentication in your Bitcointalk account so that even if someone stole your password they can't even login to your account and it will become impossible for them to hack it.

And if you put 2FA, then you need to keep the device from being lost, because recovering 2FA is quite complicated.

[AYOBA]

I created this thread to help newbies secure their account so they won't get hacked other old members that will fine it useful can apply it too so there account will be secured, all this hackers target reputable accounts more.

You created this thread to help the newbies but I think the thread can be useful for all the general members here both the old members and the newbie’s. Because the hackers can be able to deal with everyone, since nobody experts if we’re thinking that we wise the hackers are well wisely than us that’s why is very important for each an everyone to keep tneir account save with a strong password; so that it will avoid us fall in their victim.

1. Use a very strong password:
If you know you didn't use a wrong password please change it now to a very strong password use the forgotten password option and then change it, use a mix of latter's, numbers and symbols to create a strong password.

Using a strong password is very important to us. Because that’s the only way we can able to defeat the hackers, if not with the way those hackers are making a deeper research about how they will able to get access to people accounts just to hack them easily; that’s why we also need to be smart enough.

[SuperBitMan]

I created this thread to help newbies secure their account so they won't get hacked

I wonder why a hacker would want to hack a newbie account when they can literally create a new account, make a few posts, and become a newbie just like that...

OP wants to help newcomers at an early stage of their interaction with the forum, so that when they become legendary, mistakes made during registration do not lead to the loss of an account years later. Although these tips can be used not only by beginners, but also by holders of other ranks, if for some reason they did not take care of the safety of their account earlier.

Thank you tvplus006 you understand very well, if newbies don't know how to protect their account now is it when the account gets to Sr, hero or legendary member that they can protect it, it is better to protect or know how to protect once account at the early stage before it grows to a big stage, some set of people lost their account because they don't know how to protect it from the beginning stage and they were never bothered because they where not inform about the hack that goes on in this forum, there are some set of people that there account has been hacked I believe if they had this information they would be aware of hackers and they will do everything possible to protect their account this thread is also a wakeup call to everyone who has not protected there account to do so immediately.

[HajiBagi]

I created this thread to help newbies secure their account so they won't get hacked

I wonder why a hacker would want to hack a newbie account when they can literally create a new account, make a few posts, and become a newbie just like that, unless a newbie is too knowledgeable, and has managed to get a good amount of merits early on and then someone else wants to get access to that account because they know they can't achieve that themselves.

Hackers, or we should say stealers, often target dormant accounts, which means that they look for accounts that have a high rank and have been inactive for a long time, so that they can find a way to access those accounts and then sell them so that they can make some money out of it. It could happen to active accounts as well, but they know it's difficult since those who are active will have tighter security.

Anyway, the tips you've provided are useful, but it's high-ranked users who should make sure they follow them instead of newbies because newbies will barely get targeted.

Hackers will never go for a newbie account, I don't think so because they will always go for an account that has already been built and ranked up to a high rank. Hackers will always go for what they will benefit from and what will give them what they want easily, they will prefer to create a new account than to hack a newbie account because they will believe they will not benefit from it unless they don't know how to create the account.

Hackers are very wicked people who don't think about how someone will feel when they hacked their account, which is why we should be careful and make sure we protect our accounts and stop them from being hacked, secure your account with a strong password and email that you have access to in case anything happens and you can use it to recover your account, and the most important thing is that don't give your phone or your system that you have your account on to anyone, even your friends.

[coupable]

I would like to share my experience with you to give the example for others not doing similar mistakes; my bitcointalk account was created back to March 2015 using my phone number at that time as a password and my official personal email. Indeed, i had never thought that this account will be that important for me few years later. I was active for a short period of time then inactive for almost more than two years then i came back to be engaged as an active forum user. What missed during that period of inactivity is that forum database was havked in 2015 and that administration suggested everybody to change their passwords. I woke up one day to find that the password changed and the email used for registration. It took me about a year to recover my account because recovery department wasn't yet created, which helped to prove my account ownership used the main email used for registration which is my official email and a staked address which i was able to sign a message from.