lichess.org
Donate

Password reset

Acoording to new guidelines some users with easy passwords have to change their passwort. How to proceed, if they do not remember with which e-Mail adress they sat up the account some years/month ago?!
I wish Lichess would fix this! I lost a few nice studies because this new “feature” locked me out of my previous account.

Who would be able to revert this policy?
@whycantilogin said in #5:
> I wish Lichess would fix this! I lost a few nice studies because this new “feature” locked me out of my previous account.
lichess cant help people not forget the passwords and emails

> Who would be able to revert this policy?
lichess but they wont because they want there users to be more secure and safe on lichess
@whycantilogin said in #5:
> I wish Lichess would fix this! I lost a few nice studies because this new “feature” locked me out of my previous account.
The same thing happened to me
>Who would be able to revert this policy?

Nothing will be reverted.
Lichess doesn't generally allow account sharing. When you share your account with the rest of the world, measures will be taken.
@bufferunderrun I don’t think this is about account sharing at all. I can’t speak for @gbissinger who started this discussion, but in my case I was simply locked out because my old email address that I only used once when signing up is no longer accessible. I remember my password but due to new Lichess policy I’m no longer allowed to login! I don’t blame you at all for misunderstanding, seeing how unreasonable this all is, I’m just hoping to be allowed to sign in again at some point in the future.
I understand the frustration, but you also need to understand that Lichess has the right to defend against abuse of its infrastructure.

When someone uses a weak password or the same password on other sites (that site gets hacked and the password is leaked), you are involuntarily sharing your account with the whole world. Anyone can login to your account with your leaked or weak password, unless you have a two-factor authentication enabled, and then abuse the infrastructure.

You knowing your password isn't going to help, it's probably already dropped from the database and thus requires you set a new one via email address associated with the account. If you used a throw-away email then there is little Lichess could do.

This topic has been archived and can no longer be replied to.