XF 1.5 Password security

[JK2447]

Hi All

I went into my email this morning and found the usual garbage emails in my junk, but this time one email stated part of my email address and my actual password for my xenforo forum! I immediately changed it, setup 2 factor which I've meant to do for ages now, but I'm now alarmed that someone could know this. I suspect this may be a stupid question, but how could someone find my password? What should I do first to improve my security?

Any help and guidance is appreciated

J

 

[Mike]

There have been a ton of sites that have been compromised: https://haveibeenpwned.com/

Nefarious types have started taking these data dumps and brute forcing passwords, then either simply trying email/password combinations on other sites, or even sending out emails, like the one I suspect you received. We wrote about some security best practices a while back:

Reminder: Account/Password Security Best Practices

Recently, we have received several reports of XenForo sites being compromised. When we have investigated these, all evidence has pointed towards password reuse being the original cause. These investigations have also shown that a small number of users on XenForo.com have had their accounts...

xenforo.com

 

[JK2447]

There have been a ton of sites that have been compromised: https://haveibeenpwned.com/

Nefarious types have started taking these data dumps and brute forcing passwords, then either simply trying email/password combinations on other sites, or even sending out emails, like the one I suspect you received. We wrote about some security best practices a while back:

Reminder: Account/Password Security Best Practices

Recently, we have received several reports of XenForo sites being compromised. When we have investigated these, all evidence has pointed towards password reuse being the original cause. These investigations have also shown that a small number of users on XenForo.com have had their accounts...

xenforo.com

Thanks very much Mike. I'd not seen that sorry. I do try and keep up with important posts on here like that' but between the day job, the kids, anyway thank you mate, much appreciated