Email addresses are not good 'permanent' identifiers for accounts

Re:Email addresses are not good 'permanent' identifiers for ... by talldatethrow on Sunday December 31, 2023 @12:50PM (#38825942)

I set up a Twitter account long ago with an email from a domain I used. I let the domain expire later, and now can't do the password reset because it's pointing to a domain that I don't own, and can't buy anymore. Basically lost forever.

[ Parent | on HN ]

Re:Email addresses are not good 'permanent' identifiers for ... by earthling8118 on Sunday December 31, 2023 @01:36PM (#38826320)

This happened to my primary Google account once and only by sheer luck was the domain available and I was able to recover the account.

I'm the only one to blame because I changed my password at 2 in the morning when notified that someone in another country used it. I didn't put my info into a password manager or remember it because I wasn't truly awake at the time.

When recovering I had to go through a bunch of steps and did great up until the email one. Well, Google was firm about wanting access to that email. Odd, considering the domain wasn't registered at the time of requesting a password reset and so I would consider it a security violation to accept that.

Needless to say, I am much more stringent on making sure this stuff is set up correctly now.

[ Parent | on HN ]

Re:Email addresses are not good 'permanent' identifiers for ... by renonce on Sunday December 31, 2023 @12:55PM (#38825978)

You can buy a domain 10 years at a time. If you forgot to renew it one year ahead, the domain probably wasn’t important enough for you.

[ Parent | on HN ]

Re:Email addresses are not good 'permanent' identifiers for ... by talldatethrow on Sunday December 31, 2023 @12:56PM (#38825996)

Correct it was not. I let it expire. I forgot the Twitter account was registered with it. Later when I needed to relogin and couldn't remember the password, I couldn't do a password reset.

[ Parent | on HN ]