New Change to Password Setting

[video]

So I noticed this today when I tried changing the password on my account to let a skiller on. You can't directly change your password from account settings, when you click change password it says "An email has been sent to your registered email address. Please follow the instructions to change your password." That's cool cuz it means that if someone guesses your password randomly or if you let a skiller on your account, they can't actually change your password unless they have access to your email too

Edit: If you do not have an email set on your account, please test this and report back with what happens

Edit 2: This seems to happen for some and not others, test if this is the case for you and report back your findings

 

[Zippers]

What if you have an unregistered e-mail adress?

 

[video]

What if you have an unregistered e-mail adress?

Good point, could someone without an email set on their account test this?

 

[Zerkerfist]

That is interesting.. this must be a new feature added fairly recently? I changed my password a month or so ago and it was still possible to do it in the account settings menu.

 

[RS Prodigy]

i just changed my pass like yesterday and could be done in account settings :S

 

[video]

That is interesting.. this must be a new feature added fairly recently? I changed my password a month or so ago and it was still possible to do it in the account settings menu.

i just changed my pass like yesterday and could be done in account settings :S

It's either a silent update that happened today or it's only affecting my account, could someone else test this?

 

[BuiltNotBought]

I changed mine just now to test,,,no email verification required. Do you change your password alot? They might just put a verification if you change your password alot making it look like your getting hacked a lot? Not sure.

 

[CreativeNub]

Mine can only be changed through e-mail now, so it's probably a silent update that has been done today.

 

[Emperor Nero]

Interesting, and I have to concede that this is a really awesome update and will prevent a lot of hackings.

 

[MBK44]

I had this happen too, must be a v new thing

 

[SyyuEU]

Just tested on my account with normal log-in no email attached, and i never got any e-mail sent

 

[HamzaAbbasi]

Happened to me, jusr checked it.
Very nice update, one of the best I've seen for a while.

 

[Punjabi3]

Hmm my account seems bugged every time I try to add an email it asks me to log in, so I log in, go to add an email, then asks me to log in, then I go to add an email, then it asks me to log in. This should be interesting. I've had this problem for a while just never bothered till now to attempt to fix it.

 

[bigben]

Yep definitely a recent update. Found this hiding away on the RS forums:

"Hey everyone,

We have a great security measure just launched today and I wanted to be the first to let you know about it.

As an extra level of security, all password changes will be completed through your validated email address.

1. When changing your password we will drop an email to the registered email address on your account which you have validated.
2. Simply click the link or pop it into your browser to confirm you have received the email.
3. You will be forwarded to RuneScape.com, where you'll be prompted to enter your new password.

It really is that simple

If you don't have a validated email address, you can add one in your 'Email & Communication Preferences' tab under Account Settings.

Kind regards

Mod 'Augsome' Aug "

Quick find code: 250-251-53-63722598

 

[GodGenesis]

This changes affected me... and thanks for the nice find bigben!

 

[Jack]

I was also presented with this.

I'm in 2 minds about this

1 - Offering services on sythe will be better (safer for people wanting the service)

2 - This will make middlemanning a bit of a pain

 

[Kabal]

Kind of annoying. Though it should benefit the user service section seeing as now someone can't temporarily try to steal your account

 

[Heads447]

Hmm maybe if sythe incorporated the same thing Jagex has done here there wouldnt be as many hackings....

 

[Dave]

I was also presented with this.

I'm in 2 minds about this

1 - Offering services on sythe will be better (safer for people wanting the service)

2 - This will make middlemanning a bit of a pain

Good call, MMing accounts is now going to SUCK.

On that note, I actually don't like the update. That's annoying for users who don't want to deal with all the extra mumbo jumbo for changing their password. I guess yeah it makes it safer but eh, I liked it how it was.