Account Compromised Pin

[Landon]

Your account gets compromised, what do you do? You hope and pray a staff member is on to ban you. That's it. That's your only choice.

I think there should be a Account Pin (or password if you prefer). You set it in User Preferences, and once set, you cannot change it.

Then, if you're account is ever compromised, you can go to https://mc-market.org/compromised, enter your username and PIN, and if it matches- it bans you until you can secure your account.

Of course, you would need to set a password limit. 3 failed attempts- 10 minute lock. 6, 20 minute lock, etc. To prevent brute forcing.

"just enable 2fa"
When I was compromised, the user got into my email. If they also get into your Email account, 2FA won't do shit for you. Same issue for 1337

This would help anyone with a compromised account, securing their account quickly without waiting a few hours for staff.

 

[1337]

Agreed, this would have been a useful feature to have.

 

[YoloSanta]

My account was compromised as well, and he had my email, there was nothing I could do except watch luckily I was able to get staff to ban my account within an hour. But this feature would be nifty

 

[Mick]

Use two factor authentication on your phone through an app like Google Authenticator rather than using your email address to secure your account, but I do see your point.

There are just some flaws with this though, with the main one being that if your account gets compromised, you're not going to know about a compromised link and system. In my opinion this is a solution to a problem which already has a solution; you won't be compromised with phone two-factor authentication.

Denied, thanks for the suggestion.