u/Top-Raspberry1860

▲ 6 r/ideasfortheadmins+1 crossposts

Suggestion: Reddit should improve its account security.

I believe Reddit needs to strengthen its account security system. If someone gains access to your account, they can change the email address too easily. There should be a mandatory confirmation sent to the current (old) email address before any new email can be added or verified.

Without approval from the existing email, the email change should never be completed. This simple security measure could prevent many account takeovers and help users keep control of their accounts.

Another concern is that many accounts are compromised through malicious links that can steal browser cookies or active session tokens. Once an attacker gains access to an active session, they may be able to use the account without knowing the password. Requiring approval from the original email before allowing an email change would make these attacks much less effective.

I experienced a similar issue when one of my accounts was hacked, so I know how frustrating it is. I hope Reddit considers adding this extra layer of protection to help keep users' accounts safer.

reddit.com
u/Top-Raspberry1860 — 11 hours ago