Password Change/Email - Confirmation in Email?

I changed my password/email today after someone tried to phish me on Skype with a fake sythe link.

Noticed that you can see your full email when you go to User CP->Edit Profile->Edit Email+Password + you can change your email AND password fully through the site without any confirmation email to the registered email you have with Sythe, AND you can change this email, without any confirmation to your registered email.

I feel it would make it safer if we receive an email whilst changing password or email, to confirm we are doing it. Also I feel that it would be better if our registered email was in stars, or you can only see some of it, not all of it, in-case someone gets access to account they can't instantly get email.

Thanks

Soul Rich

Edit: Btw I just changed my details as a precaution, I didn't get phished but he tried.

 

Two Factor stops it being changed by someone else.

 

i kinda agree with roary, but yeah i think it would be good to be able to change user/pass via email. just more security some people might not want 2 F.A

 

Why would anyone not want 2 F.A it pretty much assures unless you're mugged in real life for your phone you cannot be hacked. On topic, I don't think it warrants an email because your 2 factor eliminates the need.

 

yeah ik, but some people may not be bothered to do it, i have it but i do sometimes get annoyed after i clear my cache or whatever, or while browsing on 3G on my phone when my signal drops i have to log in again.

If this is easy to implement with sending an email to registered email then theres no harm in it.

 

Also watch out, someone is going around saying things related to your thread on Sythe, eg. I had a gp exchanging thread and he told me he would swap 180M 07 for RS3. Then he told me to PM him and sent me a link that was like:

sythe-net.nr/profile...

Wasn't paying attention as I wasn't expecting that, but yea, watch out.

Edit: Edited in thread, but also you can edit your registered email without confirming on the email itself.

 

Email servers are down at the best of times, more emails more problems.

However, I PM'd this to Richard so it may get done when the email server is sound again.