Log-In Security Alert, Huh?

[Inept]

Why does Meta send me a log-in SECURITY ALERT that states that someone tried to log into my Face Book account who is based 300 km from here? Is this maybe not Meta at all and just some scammer or is 300 km permissible range of my home? The time it took place matches up to when I did log in so I assume it’s legit but I don’t want to click “Yes it was me” until I’ve had advice from you good readers.

 

[Nathan]

I get those "security" alerts all the time from Google, Facebook and several retail sites. That's usually when I use a different device (phone, tablet or PC) that doesn't have a website's cookies stored in the web browser.

 

[dilettante]

300 Km seems a little far for your logon to have been flagged because of your ISP balancing IP address ranges.

Usually when I get any alerts of this kind no action is required if it was me. Seems fishy that this one works backward. Maybe it really is something suspicious?

 

[Inept]

I get those "security" alerts all the time from Google, Facebook and several retail sites. That's usually when I use a different device (phone, tablet or PC) that doesn't have a website's cookies stored in the web browser.

300 Km seems a little far for your logon to have been flagged because of your ISP balancing IP address ranges.

Usually when I get any alerts of this kind no action is required if it was me. Seems fishy that this one works backward. Maybe it really is something suspicious?

Yeah, that's what I'd like to know. I did log-in about at that time from my i-phone (something I never do) but that 300 km distance has put the kibosh on me.

 

[Nathan]

@

Yeah, that's what I'd like to know. I did log-in about at that time from my i-phone (something I never do) but that 300 km distance has put the kibosh on me.

I was going to mention- my phone has an IP address from the cell phone service providers network, and my PC / laptop / tablets have IP addresses associated with my fiber optic internet company. A lot of times I have noticed that my PCs web browser 'sees' me as being somewhere off towards LA, maybe that's where my ISP's server is located.

Here's what I get frequently, when logging in to a site from a different device or browser, or if I had dumped the cookie cache of my computer:

 

[Michael Z]

I would not click on anything as it could be a malware trap. I guess you could check the return email address but I think a safer option would be to log into your Facebook account and check from there. Could be someone with a similar name as yours accidentally logged in with your name. But they did not get in your account, so no harm done.

 

[Inept]

@

I was going to mention- my phone has an IP address from the cell phone service providers network, and my PC / laptop / tablets have IP addresses associated with my fiber optic internet company. A lot of times I have noticed that my PCs web browser 'sees' me as being somewhere off towards LA, maybe that's where my ISP's server is located.

Yes, that's probably what's happened.

Here's what I get frequently, when logging in to a site from a different device or browser, or if I had dumped the cookie cache of my computer:

View attachment 418199

Here's what I got:

 

[Nathan]

@Inept, yes, looks to be the case. Of course it's always prudent to pay attention to such alerts, one that really caught my attention a few years ago was from Google/Gmail stating that someone in Romania was attempting to log-in. I still don't know the significance of that one, but I immediately change my password.

 

[Inept]

@Inept, yes, looks to be the case. Of course it's always prudent to pay attention to such alerts, one that really caught my attention a few years ago was from Google/Gmail stating that someone in Romania was attempting to log-in. I still don't know the significance of that one, but I immediately change my password.

Problem for me is that I can't keep more than three passwords in my head.

 

[OneEyedDiva]

About a month ago, Facebook sent me the same sort of message after not allowing me to login to my account on the computer! Perhaps it's because I use a VPN, But I have two factor identification and followed the steps for that. They send a code to my phone. How could those bubble heads block me from my own account after following those steps! Grrrrrr! It's a good thing I'm still logged in on my tablet and phone. I have business to conduct, friends to console or congratulate and a family group to keep informed about our upcoming reunion. Since they "improved" (being facetious) after becoming Meta, their policies and actions have become more and more annoying.

 

[MACKTEXAS]

I've had the same primary email account at least 25 years and I've ignored all such notices without incident. The notices routinely appear when I log in on a different device, but I do not want to be constrained to only one device.

If someone is attempting to log into my account, I don't see how it would help to change my password. If they could figure out the first password, they could just as easily figure out the second.

One other thought. The warning says if it was me, no action is necessary. If it wasn't me, the unauthorized user wouldn't take any action either, so it seems to me that negates the whole usefulness of the warning.

 

[Nathan]

Problem for me is that I can't keep more than three passwords in my head.

I know what you mean. I keep passwords, account details and such on an encrypted thumb drive.

 

[David777]

Problem for me is that I can't keep more than three passwords in my head.

Web search "how create safe passwords remember".

There are many ways to create passwords systematically without resorting to password managers using a mix of letters, numbers, symbols one can remember at least a short list of. If there are limitations with numbers of possible combinations, one will always be able to try all possibilities as a last result. Key is being consistent with whatever system. I have a long list of passwords that for immediate use, I only need to remember a few that I use frequently with the rest in a free to download command line or GUI file app aescrypt that runs encrypting sensitive files on all my devices.

As an example, lets say your a car enthusiast. You could create passwords that were only based on sedan models between 1980 and 1985 you know by familiarity, spelled backwards while inserting numbers or symbols in specific ways. There might only be a few dozen possibilities one could always try if forgotten. With a small cheat sheet note in one's wallet just listing the possible models, others even if they stole your wallet would not know why the note was there and even if they did would not understand how it was used.

But you knowing for all Chevrolets you add the %) so and capitalize so, just knowing the model lists is all you will need. For a Ford Mustang, might use %{ . And could add those special symbols to your cheat sheet without explanation, no one would make sense of. Key thing is just being a little creative. (At this moment, some gal on the forum is now changing her passwords to cat breed names. )

Thus Chevrolet Impalla...

allApmi%)yVehc

 

[Inept]

Web search "how create safe passwords remember".

There are many ways to create passwords systematically without resorting to password managers using a mix of letters, numbers, symbols one can remember at least a short list of. If there are limitations with numbers of possible combinations, one will always be able to try all possibilities as a last result. Key is being consistent with whatever system. I have a long list of passwords that for immediate use, I only need to remember a few that I use frequently with the rest in a free to download command line or GUI file app aescrypt that runs encrypting sensitive files on all my devices.

As an example, lets say your a car enthusiast. You could create passwords that were only based on sedan models between 1980 and 1985 you know by familiarity, spelled backwards while inserting numbers or symbols in specific ways. There might only be a few dozen possibilities one could always try if forgotten. With a small cheat sheet note in one's wallet just listing the possible models, others even if they stole your wallet would not know why the note was there and even if they did would not understand how it was used.

But you knowing for all Chevrolets you add the %) so and capitalize so, just knowing the model lists is all you will need. For a Ford Mustang, might use %{ . And could add those special symbols to your cheat sheet without explanation, no one would make sense of. Key thing is just being a little creative. (At this moment, some gal on the forum is now changing her passwords to cat breed names. )

Thus Chevrolet Impalla...

allApmi%)yVehc

This sounded really good in the beginning but then you lost me. Anyway I think you are right about writing them down on a piece of paper and putting it somewhere. I certainly cannot remember more than 3 passwords and now that I keep needing to change them ..... I'm screwed! Especially because some require a CAPITAL letter and maybe a punctuation symbol. What about that "free to download command line" and "GUI file app ascrypt" stuff you mention. Are they easy to download and use?

 

[MACKTEXAS]

I use Wise Folder Hider. <- That's the link to download it.
And here's a video on how to use it. -> from youtube.

Once it's set up, do the following:

1) Create a new text document and name it something innocuous you'll remember. Enter your passwords into the text document. Save the text document (with a password, if you want).
2) Create a new folder and name it the same thing as the document.
3) Put the new text document inside the new folder you just created.
4) Hide the folder in Wise Folder Hider.

Then, you only need remember one password - the one that opens Wise Folder Hider. (or 2 if you password protected the new text document).

As long as you keep the folder hidden in WISE, it will be encrypted and will not show on your computer or File Explorer, but you can access the folder at any time and see all your passwords.

 

[Inept]

I use Wise Folder Hider. <- That's the link to download it.
And here's a video on how to use it. -> from youtube.

Once it's set up, do the following:

1) Create a new text document and name it something innocuous you'll remember. Enter your passwords into the text document. Save the text document (with a password, if you want).
2) Create a new folder and name it the same thing as the document.
3) Put the new text document inside the new folder you just created.
4) Hide the folder in Wise Folder Hider.

Then, you only need remember one password - the one that opens Wise Folder Hider. (or 2 if you password protected the new text document).

As long as you keep the folder hidden in WISE, it will be encrypted and will not show on your computer or File Explorer, but you can access the folder at any time and see all your passwords.

Thank you. It looks simple to do. I'm going to try it. But the password I need to use to access the Wise Folder Hider ....... will I be required to change it once in a while?

 

[Inept]

I use Wise Folder Hider. ... you only need remember one password - the one that opens Wise Folder Hider....

Thanks, Mack! I've done it.

 

[Capt Lightning]

I have my location hidden , or maybe it's just not set up. If I order anything from eBay, I get one of these messages saying an unknown user is trying to access my account. The date and time is always when I logged on, but it gives my location almost anywhere in GB.

 

[MACKTEXAS]

Thank you. It looks simple to do. I'm going to try it. But the password I need to use to access the Wise Folder Hider ....... will I be required to change it once in a while?

No, you don't have to change the password, but it has the option to do so if you like.

 

[Inept]

No, you don't have to change the password, but it has the option to do so if you like.

It works fine. Thank you again.

 

[Inept]

... I have .... a family group to keep informed about our upcoming reunion.

Are we invited?

 

[OneEyedDiva]

Are we invited?

Yes, if you want to pay the $125 registration fee, plus the cost of 3 nights at the Hyatt hotel, or I guess you could book a less expensive option close to the festivities. And of course there would be the cost of travel to North Carolina.

 

[Inept]

Yes, if you want to pay the $125 registration fee, plus the cost of 3 nights at the Hyatt hotel, or I guess you could book a less expensive option close to the festivities. And of course there would be the cost of travel to North Carolina.

Oh drat. My funds are only sufficient enough to get me as far as Bermuda.