did they have my password?? what triggers this specific email??? instagram HELP.
Source Reddit Cybersecurity
Discussion
A user reported receiving a security email from Instagram indicating a login attempt requiring verification. The user experienced difficulty resetting their password and was signed out of their account, then prompted for backup codes before being allowed to set a new password. The user is uncertain whether an unauthorized party had their password or if this was a legitimate security notification triggered by a login attempt without the password. No confirmed compromise or exploit is indicated.
r/cybersecurity (opens in a new tab)u/auhatt0 points0 comments
hello i have severe anxiety around getting hacked. i was shopping today when, at 3:19pm, i received the an email from security@mail.instagram.com, with the subject line “Verify your account”. The body stated: Hi [user],
Someone tried to log in to your Instagram account.
If this was you, please use the following code to confirm your identity:
[code]
If this wasn't you, please reset your password to secure your account“.
I panicked and went into my instagram app immediately to change my password, not wanting to click the link. when i did that, it wouldn’t let me and said “something went wrong.” I also received a text message at 3:21 while I was anxiously trying to change my password and save my account with an Instagram code I didn’t prompt. I hurriedly went back to the email and clicked the link to reset my password, but it wasn’t cooperating and it wouldn’t let me (hard to remember, I was freaking out). I went back to my app and I had been signed out. I signed back in and it asked me for backup codes which I apparently didn’t save, and then it magically let me set a new password from the login page before it let me back in. I went into my account and changed my password AGAIN for good measure. However, I’m confused. This specific email is weird because if I try to log into a friend’s page without their password, it gives them an email with a code and says “here’s three easy ways to get back into your Instagram” along with some blue buttons to press. When I go into a private browser and try to log into my own account, not using my password, I get a similar less scary email with the blue buttons and a code. But using my password, I’m prompted to enter a code from text message or using my backup codes—it doesn’t even give me an option to send a code to my email.
I tried to check the recent emails Instagram has sent, but when the inapp browser asked me to log in and I put my information in, I received an email immediately that stated: “We noticed a new login, [user].” And displayed the location and kind of phone I used. So if someone had correctly gotten my password, wouldn’t I have just received that email if they got in?
I guess my question is: did someone try to get in without my password, OR did they have my password? The latter would be horrific because I changed it a year ago and was unique. I am super paranoid about hacking and online safety. I keep my passwords written down. Does anyone have any answers? My heart has been POUNDING for hours. i can’t calm down. I am so confused. Please please help me.