Password recovery

[Newlands]

If she gave them the bank account details then she must have given them the banking password, otherwise what use are the details?

Have you contacted the bank?

^ This.
If she made a payment using her bank details she will have provided a card name and number, expiry date and 3 digit security code. Now they have that they can deduct what they want.

 

[slim_boy_fat]

^ This.
If she made a payment using her bank details she will have provided a card name and number, expiry date and 3 digit security code. Now they have that they can deduct what they want.

If she was quick enough, the Bank will have cancelled the compromised card and will be in the process of issuing a replacement.

 

[Morrisman]

^ This.
If she made a payment using her bank details she will have provided a card name and number, expiry date and 3 digit security code. Now they have that they can deduct what they want.

And returning the phone to its base settings will achieve absolutely nothing.

There's more to all this than meets the eye.....

 

[plewlandsbob]

As said in post 11, Bank has been notified, and card cancelled.

There is no ulterior motive or anything dodgy , going on , on mine or wifes part. She had her email log in details saved on phone and has forgotten password. Never had it set up with an alternative email.

She panicked, after talking to whoever she spoke too and reset phone back to factory settings, after taking their "advice"

Her phone was the only device , she used for emails so password was not saved elsewhere.

Daughter is going to set up.a new email account, for her.

Thanks
Bob

 

[Pigeon_Droppings2]

There are online ones such as lastpass, but frankly entrusting all your sensitive passwords to somebody elses computer never did appeal to me.

Well that turned out to be quite wise with the benefit of hindsight!

LastPass had a data breach in 2022....but just before Christmas I think they finally admitted that hackers took a copy of users encrypted passwords. The fact that they got hacked isn't annoying....the fact that they waited several months to tell users that their passwords (all be it in encrypted form) were copied....now that is quite annoying!

 

[brewdexta]

I use KeePass but don't upload the encrypted file to cloud storage. The wife does the same. I occasionally sync my PC with my phone's KeePass file via USB cable. The file is then backed up from my PC to NAS, and that is copied daily to another NAS, and I occasionally take a snapshot of essential files onto a large USB SSD.

 

[Pigeon_Droppings2]

I review all my passwords and also IT backups/recoveries etc once a year (over Christmas as it happens). The only place I keep bank login info is in my head.

...I was looking for a good off-line vault as it happens.

 

[skotl]

I used to use LastPass and it was definitely the easiest tool on the market. But they doubled their prices every couple of years (I started paying £4 a year and threw in the towel when the price got to £40).
And the fact that this year's hack wasn't even their first one - they have had, IIRC, two breaches in the past. A company that literally manages security for its users that continues to let this happen is not a company you should trust with your data or your money.

Been using BitWarden for a couple of years now and, while it's not as easy to use as LastPass, it has the benefit of being free and not leaking your data.

 

[Robotstar5]

I used to use LastPass and it was definitely the easiest tool on the market. But they doubled their prices every couple of years (I started paying £4 a year and threw in the towel when the price got to £40).
And the fact that this year's hack wasn't even their first one - they have had, IIRC, two breaches in the past. A company that literally manages security for its users that continues to let this happen is not a company you should trust with your data or your money.

Been using BitWarden for a couple of years now and, while it's not as easy to use as LastPass, it has the benefit of being free and not leaking your data.

Years ago I had a Norton "protect your privacy/computer security" type package free with a new PC, at the end of 12 months I decided to renew it, a week after paying by card, my card was used on a spending spree, so much for security.

 

[Pigeon_Droppings2]

I use KeePass but don't upload the encrypted file to cloud storage.

Cheers for the recommendation...I took a look at KeePassXC and it looks pretty good....the local vault is a big plus I think for critical passwords.

 

[MetalMonkey]

Well that turned out to be quite wise with the benefit of hindsight!

Just inevitable really. It is a high value target accessible by the internet. It's a matter of when not if.
Same with all cloud based stuff really.

I've always used keepass for personal use, and a locally stored multi-user database like password safe for team access with layered access rights.
That way you can keep tight control over who has access to what - I never saw much benefit for having the passwords in the cloud, just make sure to have an encrypted backup in a crash kit.