Skip to main content

Password Guessing May Cause Locked Accounts

One of the more mysterious causes of blog loss involves deleted blogs, with the owner being forced to recover account access because of "suspicious" / "unusual" account activity.

In general, with the report made in Blogger Help Forum: Get Help with an Issue, we may dismiss the owner as a "hacking victim". We may suspect just one more botnet in operation, stealing peoples accounts and blogs - and the victim unwisely revealed his email address.

Sometimes, the story is more bizarre.

When a blog owner forgets or loses login details, we'll try to research owner profile information, by examining blog source code.

With blogs using dynamic templates, and with deleted / private blogs, owner profile information can't be easily found. There are still more reasons why online diagnosis cannot help everybody.

If we can't help a frustrated blog owner recover access, he may try other solutions.

When we can't provide useful hints - or research blog owner profiles - a frustrated blog owner may resort to alternate techniques to recover account access.

Generally this will involve making a list of all email addresses used around the time the blog was started - then trying to login to Blogger, using all possible passwords for each email account, one by one.

Brute force blind recovery, with luck, may be successful.

With enough determination or luck, this may produce success - and control will be recovered. Sometimes, recovery comes - at a price.

We've seen a few reports, recently, about demographic details being requested - with the requirement to list recent Google account activity, or when was the account first used?

When unsuccessful, repeated attempts at logging in to a given Blogger account, using the wrong passwords, can cause "suspicious" / "unusual" activity account lock - and other blogs will go offline. With the would be blog owner logging in blindly, the effects of the repeated attempts may not be observed, directly or immediately.


An account locked for "suspicious" / "unusual" activity can produce offline blogs.



"Suspicious" / "unusual" account activity lock can affect innocent third parties.

The account / blogs affected may be owned by the person trying to recover control - or possibly by an innocent third party.

Long ago, people would receive mysterious email. Now, we have mysterious locked accounts and deleted blogs - involving an account name being "guessed" by another blog owner, and multiple bad password attempts.

Some hacking victims do not cause their own troubles.

All hacking victims are not innocents, who naively disclose their email address.

If your account was locked, for suspicious / unusual activity, you'll have to request Appeal / Review, and follow instructions. And you may have to wait out the locked blog review process too.

This scenario is yet one more reason why you need to use Google 2-Step Verification.

Comments

Popular posts from this blog

What's The URL Of My Blog?

We see the plea for help, periodicallyI need the URL of my blog, so I can give it to my friends. Help!Who's buried in Grant's Tomb, after all?No Chuck, be polite.OK, OK. The title of this blog is "The Real Blogger Status", and the title of this post is "What's The URL Of My Blog?".

Leave Comments Here

Like any blogger, I appreciate polite comments, when they are relevant to the blog, and posted to the relevant article in the right blog. If you want to ask me a question thats relevant to blogging, but you can't find the right post to start with (I haven't written about everything blogger related, yet, nor the way things are going I don't expect to either), ask your questions here, or leave an entry in my guestbook.

As noted above, please note my commenting policy. If you post a comment to this post, I will probably treat it as a "Contact Me" post. If you have an issue that's relevant to any technical issue in the blog, please leave a comment on the specific post, not here. This post is for general comments, and for non posted contact to me.

If the form below does not work for you, check your third party cookies setting!

For actual technical issues, note that peer support in Blogger Help Forum: Something Is Broken, or Nitecruzr Dot Net - Blogging is, almos…

What Is "ghs.google.com" vs. "ghs.googlehosted.com"?

With Google Domains registered custom domains becoming more normal, we are seeing one odd attention to detail, expressed as confusion in Blogger Help Forum: Learn More About Blogger.My website uses "ghs.google.com" - am I supposed to use "ghs.googlehosted.com", instead?It's good to be attentive to detail, particularly with custom domain publishing. This is one detail that may not require immediate attention, however.