Hey everyone!
Many of you are probably pretty annoyed right now at having to update your account credentials and enable 2FA. That’s completely understandable. So we wanted to take a minute to explain what’s going on and why it needed to happen.
Up until now, 2FA has been optional. Nobody likes having to navigate to their emails or find their phone in order to log into a website they frequently access, and we’ve always wanted to make using MCM a painless process.
However, unfortunately, not everyone can be trusted to use a strong and unique password for their MC-Market account, and in a marketplace like ours, trust is everything. If a resource buyer uses the same password for their MC-Market account as they use on another platform and that platform’s database is compromised, the resource authors that user purchased from are instantly at risk of having their products leaked.
Leak sites know this, and they’ve recently increased their efforts to get into the accounts of users of MC-Market as well as other resource oriented platforms, and download both the products the user has purchased as well as the products the user has authored themselves. We’ve even traced back the source of the credentials they’re using to be their own leaked database.
If you have an account on a leak site, you should assume that they’re going to use that account’s password to try logging into your accounts on other websites.
In a marketplace like ours, your account security doesn’t just impact you. It impacts everyone who relies on you to keep your account secured.
That’s why, starting today and for the foreseeable future, everyone will be required to set up 2FA. This way, we can trust and everyone can trust, that the only person who will ever be accessing your account is you. We may replace the 2FA requirement with other security features as we look for other options, but for now, this is how it must be.
If you have not already set up 2FA and you haven’t changed your password within the last week, you should have received an email prompting you to change your password as well.
We’d like to clarify for those who aren’t familiar with the terminology, that MC-Market’s database has not been leaked or compromised. It is merely 3rd party databases that are being used to test credentials against our platform. Nonetheless, this poses a threat to our users and we intend to protect against it.
A reminder to everyone, never under any circumstances use a password on more than one website. Also, please secure your emails. Your email is your last line of defense. If someone compromises your email, they have effectively compromised every account linked to that email. If you are at all unsure in your email’s security, go secure it now.
Thank you everyone for your patience and understanding.
