I have done hours of research trying to find a solution and I have found no solution at all.
Basically, there is a bug that is preventing me from logging in to my (Premium) account and also preventing me from recovering the password. I the proceeded to create a new account to check if the account had the same username and lo and behold, it did.
SPOTIFY LOGGED ME OUT NOW I CANT LOG IN PASSWORD
At first I assumed that I could use the password recovery option to quickly change the password and get back to listening but when I try to input my email, it says, "The username or email you provided is not associated with an active Spotify account." I tried to input the username that was linked to the account and got the same message.
The issue now, is that no combination of username/email and password will log me into the account. I received an email attempting to verify the change in email address and did verify it. Upon waking up this morning however, I was logged out of my account on all of my devices and I am can't to log back in. Nobody cares about your spotify account they want to know if your bank / other sites share similar logins. Actually yeah that's exactly what they do. I changed it to my current email and there was no issue. >That's assuming the hackers are going to use your specific logins across other platforms. I believe this email address has been the connected email since I started using the account. All three have denied data breaches.(Long time lurker here so pardon any issues on my first post) So last night I was trying to recover some old playlists that I had deleted a while back and while on the spotify website, I noticed that the email that I had associated with my account wasn't one that I have any recollection of using (although looked very similar to my current email). Spotify did not respond to our follow-up questions.Ĭustomers of Chipotle, DoorDash and OkCupid have all reported account hacks in recent months. Netflix, Facebook and Spotify too have all proactively reset account passwords in the aftermath of third-party data breaches by obtaining the data set and matching exposed passwords against their databases. By scrambling lists of weak or stolen passwords using the same algorithm, companies can match weak passwords against their own databases and proactively send out password reset emails. Instead, they scramble passwords using a hashing algorithm. Companies typically don’t store user passwords in plaintext. It’s not uncommon for companies to reset user passwords if they believe they are weak or easily guessed.
Two people who commented on this Hacker News thread also said their passwords were unique, casting doubt on the veracity of a credential stuffing attack. Some used the same password across different websites and some used passwords unique to Spotify. We contacted several people who received the email reset message. In other words, Spotify says this is a credential stuffing attack, where hackers take lists of usernames and passwords from other breached sites and brute-force their way into other accounts. As a best practice, we strongly recommend users not to use the same credentials across different services to protect themselves.” When reached, Spotify spokesperson Peter Collins said: “As part of our ongoing maintenance efforts to combat fraudulent activity on our service, we recently shared a communication with select users to reset their passwords as a precaution. Did someone hack in to listen to Justin Bieber or something? Spotify just reset my password due to 'suspicious activity'.
0 kommentar(er)
