Jump to content

  • Curse Sites
Become a Premium Member! Help
Latest News Article

Huge Security Problem With Migrated Accounts

change password migrated accounts cant change password

  • Please log in to reply
13 replies to this topic

#1

SuperRaWR
  • Location: Sylvan Lake, AB

Posted 13 March 2012 - 12:59 AM

Hello, I'm here to report an issue that I am having.  
Awhile back, I had migrated my account to Mojangs new account system.  

I tried to change my password, and went through the steps to do so, and managed to successfully change my mojang account password.

Whenever I log into minecraft.net or mojangs website, I am required to use my email and new password.  However, from the minecraft launcher, my old password still works!  It appears as though once an account is migrated, it's not removed from the original login server and is still available on the launcher.

TLDR:
The minecraft launcher doesn't use the new account system.  You can't change your password on the old account system.

Register or log in to remove.

#2

SuperRaWR
  • Location: Sylvan Lake, AB

Posted 14 March 2012 - 08:53 PM

Is there anything that's going to be done about this?

#3

SuperRaWR
  • Location: Sylvan Lake, AB

Posted 20 March 2012 - 06:26 PM

Is there someway I can contact Mojang?  This is ridiculous.

#4

XxPAUNKxX
  • Location: Jakarta, Indonesia
  • Minecraft: NicoMarpaunk

Posted 20 March 2012 - 06:35 PM

lol im having the same problem...

Posted Image

Did my post help you ? If yes, please click the green button at bottom right :)


#5

Marc
    Marc

    Customer Support Manager

  • Mojang
  • 261 posts
  • Location: WA, USA
  • Minecraft: Marc

Posted 20 March 2012 - 09:54 PM

View PostSuperRaWR, on 20 March 2012 - 06:26 PM, said:

Is there someway I can contact Mojang?  This is ridiculous.

Click the big help link on Minecraft.net? :-)

http://help.mojang.c...t-account-types
Have questions? Please visit help.mojang.com
Twitter: @Marc_IRL

#6

SuperRaWR
  • Location: Sylvan Lake, AB

Posted 21 March 2012 - 01:58 AM

View PostMarc, on 20 March 2012 - 09:54 PM, said:

Click the big help link on Minecraft.net? :-)

http://help.mojang.c...t-account-types

I understand this, but I NEED to change my password for my old minecraft account.  There is no way to do that, at least that I'm aware of, and really it shouldn't be impossible.  

Posted Image


It shouldn't work for now...  It should be phased out the minute your account migrates...

#7

Marc
    Marc

    Customer Support Manager

  • Mojang
  • 261 posts
  • Location: WA, USA
  • Minecraft: Marc

Posted 21 March 2012 - 02:29 AM

We're working on it.

Why do you NEED to change the old password? It's not usually used after you migrate.
Have questions? Please visit help.mojang.com
Twitter: @Marc_IRL

#8

SuperRaWR
  • Location: Sylvan Lake, AB

Posted 22 March 2012 - 02:33 AM

View PostMarc, on 21 March 2012 - 02:29 AM, said:

We're working on it.

Why do you NEED to change the old password? It's not usually used after you migrate.

In my last post, I took a screenshot of the FAQ page you linked to me.  In that screenshot, it clearly says that the old credentials, still work for logging into the game.  This means that I can change my mojang account password, but it doesn't change my password used to log into the game.  Not only that, but it's impossible to change the password now that I've migrated.  

This means that say... if my account was stolen, there would be nothing I could do about it.  This person who stole my account could theoretically still log into minecraft under my username.  FYI, this is happening.

#9

Marc
    Marc

    Customer Support Manager

  • Mojang
  • 261 posts
  • Location: WA, USA
  • Minecraft: Marc

Posted 22 March 2012 - 09:09 PM

I can randomize old Minecraft account passwords to prevent this, if someone's account has been compromised.

I've asked that the web devs and Minecraft devs clearly list on the client login that you can use your username, or email address if you've been migrated. I've also asked them to force logins with migrated accounts to the email, like Minecraft.net currently does.

This is a problem that I was only made aware of recently, and it won't be fixed overnight. However, it's not a thing that's affecting a large percentage of users. IF it affects someone who has a migrated account, they can let me know, and I'll randomize their password. This is one of those rare things that poking me on Twitter is actually a good idea for.

I didn't mean to be difficult before, I was basically asking if YOU were having this issue. It sounds like you are not.
Have questions? Please visit help.mojang.com
Twitter: @Marc_IRL

#10

SuperRaWR
  • Location: Sylvan Lake, AB

Posted 23 March 2012 - 04:18 AM

I am having this issue actually.  My account has been compromised, and my credentials have been posted publicly.  If you could let me know of the procedure for verifying proof of account ownership, etc... I would definitely appreciate it if you could reset my password.

#11

Marc
    Marc

    Customer Support Manager

  • Mojang
  • 261 posts
  • Location: WA, USA
  • Minecraft: Marc

Posted 23 March 2012 - 06:03 PM

I've updated our help center with this issue

http://help.mojang.c...igration-issues
http://help.mojang.c...t-account-types

I won't make a policy of helping people via the forums (we need people to email us so we can ask for personal information and have a searchable paper trail), but if you just PM me your username, I'll randomize your old password, since that doesn't really require any verification. I'm assuming it's not superrawr, because that account has not been migrated.
Have questions? Please visit help.mojang.com
Twitter: @Marc_IRL

#12

SuperRaWR
  • Location: Sylvan Lake, AB

Posted 23 March 2012 - 08:39 PM

View PostMarc, on 23 March 2012 - 06:03 PM, said:

I've updated our help center with this issue

http://help.mojang.c...igration-issues
http://help.mojang.c...t-account-types

I won't make a policy of helping people via the forums (we need people to email us so we can ask for personal information and have a searchable paper trail), but if you just PM me your username, I'll randomize your old password, since that doesn't really require any verification. I'm assuming it's not superrawr, because that account has not been migrated.

Excellent!  I'm glad to have helped point out an issue.  I have messaged you with my username, WDZ_SuperRaWR.  Thank you for the help!

#13

Dano10
    Dano10

    Stone Miner

  • Members
  • 72 posts
  • Minecraft: Dano10

Posted 24 March 2012 - 05:49 AM

View PostMarc, on 23 March 2012 - 06:03 PM, said:

I've updated our help center with this issue

http://help.mojang.c...igration-issues
http://help.mojang.c...t-account-types

I won't make a policy of helping people via the forums (we need people to email us so we can ask for personal information and have a searchable paper trail), but if you just PM me your username, I'll randomize your old password, since that doesn't really require any verification. I'm assuming it's not superrawr, because that account has not been migrated.

I'm having this issue too, i have sent a number of emails/support requests over the past few months and have got no reply, i understand you only have five people working on support but its really getting annoying being banned from servers i have never visited. :/

#14

E123Timay

Posted 01 April 2012 - 01:40 AM

hey I have a question too. This migration thing is confusing. My username is E123Timay ok. . I can log into minecraft with my e123timay name and password fine. When i try to log into minecraft.net with it it says that I am not on records and neither is my email? But I know it is because I bought the game and have logged into my account before. When I go to my mojang account to reset my password, then go to my email, it says I have an invalid token and to retry. HELP!!! I cant get into my minecraft account Posted Image Plz respond back soon. Also, something wierd. When i type try clicking on forgot username or verify email it says i am not on record. But when I type in my username in forgot password, it says my account has been migrated... so very confusing, I miss the old way. Was a lot easier