I've read the news but the alert isn't disappearing O_o

thank you staff for all your hard work:like:

Changed my PW and everything seems fine now :)

I still really wonder how you know many players didn't change it/made it too similar/used an old password.

If you're properly securing passwords to modern-day 2018 security standards, that should be completely impossible short of users telling you their passwords, which as we all know, no one should do.

If you're able to glean this information in any other way, no password is secure here. I know I sound like a broken record, and I know you feel attacked, annoyed, wish I and others would shut up, but the fact remains that many of us have put actual money into this site, and several more have put LOADS of time (even if I'm not one of them, as a 'newbie').

I don't feel properly assured, confident, or secure about my account's safety, still, despite putting my best efforts forward to secure my account.

Still, thanks for your continued hard work.

And before someone says 'the site wasn't breached, it was weak/non-unique passwords,' I know this. I'm not saying the site was breached, though I know it's had several issues in the past, long before I joined and which largely contributed to me not joining until recently.

I'm saying I'm worried about what will happen if/when it does next suffer a breach. If you're able to access users' passwords in any way, so will the intruder, and it won't matter how tough their password is to crack if it's stored, even under weak encryption, in a database. If you have that key...so will the attacker.

That's what I'm worried about.

@Verne for the recently compromised account the password was literally posted in MaraTalk, that's how we knew what had happened.

As for other players - well everyone on the site had to change this time, it didn't discriminate so really it wasn't telling who had what cos it was just saying everybody change your password.

I get your concerns and frustrations but Shaggy has informed you that they are encrypted and meet the standards. I can't confirm as a lowly mod but Shaggy wouldn't say things like that for the heck of it.

From what we can gather they are grabbing these off another site. What site we don't fully know but it's an excellent advertisement for different passwords on different sites for sure :)

This is the third time and my password is so nonsensical by this time that there's no way it's not secure. UGH. If you can't protect us - and I'm with @Verne, you should not be able to tell if someone's using a password "too similar" to an old one, then you've lost our trust.

It doesn't seem to be working for me. Every time I try to change my password it keeps saying 'Details could not be changed. Please go back and try again'. The ones I'm trying meet all the password requirements.

Edit: It worked when I changed browsers. Now sure if that's an issue on my end or not.

Thank you Ian for all that you are doing to keep our accounts safe and thank you and all the staff members who are working hard to deal with this mess...praying it ends soon

I've read the news but the alert isn't disappearing +1 O_o

I already changed my PW and verified emails, but the alert is still there :/ :'(

EDIT: managed to fix the PW issue, but i think the problem is that I havent got any mail from marapets (checked even my spam folder)

EDIT2: somehow it fixed itself(?) and now it states "verified", thank you!!

Thank you guys for working to make sure we are all secure on this great site

I’m going to run out of passwords at this rate. I have too many to remember all their variances. This is becoming annoying because I was verified and I did change my PW. Ugh.