Forum

Having same password can lead to linking of your EBAY accounts
 

I have just realized I have created a new account BUT AS STUPID as I was, I created the SAME password as the old one?? SHOULD I CHANGE IT NOW? or leave it the same NO PROBLEMS so far account is about 1.5 months old....

It also depend on your password, if it's something common like your dog's name it won't really be a big problem cause many people have the same but if it's something specific that only you use then it's a problem.

Should I change it though ??
 

It is kind of specific but not really ....Should I go in and change it ?? Or Leave it as is....?? Thanks

i accidentally used the same password for one of my new paypal accounts, and have not had a problem, but paypal also says they do not store users passwords.

It's not the password that get you link,period!

it is not smart to use the same password, anyway. never do it.

Shouldn't be a problem, it might be one thing they use, but they will need more than just a password to link you...you should be fine...

make it a mixture of letters and words, keep it on your phone, or in excel, soon enough you will remember it.

They can't read your passwords, neither PayPal nor eBay. They only store password hash, which is a bunch of hexidecimal digits. That said, hash of the same password will be the same.

It would be hard to imagine that they store more than one password, that is, that they make log of all the passwords you ever used. It is probably a single entry in the database, and if you change it, that entry is replaced.

I'd go ahead and change it.

WOW. Is that legal?

Are you trying to say legal and ebay as one word or in one breath? I would think there are
hundreds and more statues that ebay 'bends' to its own ends, neither ethical or legal.

It linked me in the past. Definitely go ahead and change it.

Legit places hash your password, but ebay makes it readable.

I emailed ebay asking if passwords were stored in an undecryptable hash and ebay ignored the part about whether they were undecryptable or not and then said, "your password on eBay is stored on a secured server and in an encrypted format". The rest of the email was a long form letter paste from their help pages. But well ebay claims passwords are encrypted, but of course if they're two-way encrypted their software can just decrypt them.

After reading this thread last week i had decided to change the password to one of my ebay accounts...but since i hadnt logged on in a while and was doing all work through auctiva i completely forgot i changed it and when i was trying to log in just now... i seriously felt like my heart was going to come out of my throat when it kept saying "incorrect password". Then, i remembered i changed it. *phew* Thought i was hacked for a minute there.

divine422, A note to be cautious.;) Keep a record of all your information about accounts.
That way you prevent any disaster.:eek: Use excel or stickies. Makes you safe.:)

Thanks for the tip, im doing the spreadsheet thing now :).

If their linking system is indeed programmed to match passwords (in addition to other factors) as one of the criteria to look for that REALLY spells some serious desperation on their part, because that's rather unheard of even for online banking establishments... :-)

I am pleasantly surprised that this community of people has had the kind of dedication and sharing mentality to have compiled such a long list of documented factors to always stay one step ahead of ebay's tyrrany.

I, for one, have always chosen the kind of passwords that I didn't really have to memorize. Say, I need to log into my gmail account.... I know my password would be a shuffle of the letters that make up the domain name of the website I'm logging in to. And this shuffle is based on my own personal formula. And I add a number in there to boot. To someone who doesn't know the formula, the password appears like a nonsense string of text. That's safe, is considered a strong password by most standards, and you will always know what the password. Every login is different. Unless of course, they change the domain name, which is very rare.

But with different accounts on the same domain, like ebay, this wouldn't work well, it seems... Clever *******s, checking the passwords. :-)

Actually, I have a simple yet effective idea of how to modify my formula (for the same-site scenario) to make every single password I use unique enough to fool a human being (if need be).