topic Re: Possible Hacking - would like to remove app password in Email

Possible Hacking - would like to remove app password

Roger1939 — Mon, 05 Feb 2024 13:02:41 GMT

Hello

It appears that my email has been hacked as I have been informed that I have sent emails to most of my contacts this morning.

I have since logged out of all other devices, changed my password and I have activiated 2 step verification but further emails have been sent.

I can see the following IMAP activities but when I click on "Delete app password" nothing seems to happen:

******************************************************************************

Email application (app password: Windows computer_X_df4cdad876d04db48ebcd574f695b795)

Stockholm, Stockholm, Sweden

2 hours ago

Delete app password

******************************************************************************

I can see that an App password was added this morning but it was not added by myself, can you advise how it can be removed please?

Re: Possible Hacking - would like to remove app password

caesarome — Mon, 05 Feb 2024 13:12:35 GMT

An app password is only needed if you use an app or program like Outlook so if you need to you can generate another one:

https://www.sky.com/sky-yahoo-mail/manage-apps?client=email

Although I can't see how someone you can get access to whatever app or program you use ?

Re: Possible Hacking - would like to remove app password

Mark39 — Mon, 05 Feb 2024 13:24:41 GMT

I doubt you'll be able to use the link you posted to delete an app password. Sky Yahoo Mail app passwords are not the same as Yahoo app passwords.

I'd suggest replacing the app password in whatever app you're using by generating a new app password.

I suspect you've not been hacked but have given away your login credentials by completing a fake login screen. If that's the case, you'll first need to change your standard Sky login password via the forgotten password link here and check for any filters set up on your email account: https://www.sky.com/signin/email

Re: Possible Hacking - would like to remove app password

Roger1939 — Mon, 05 Feb 2024 13:29:28 GMT

Thank you Mark

That all makes sense (embarrassingly), can I confirm if I setup a new application password it will remove the other one?

Re: Possible Hacking - would like to remove app password

Mark39 — Mon, 05 Feb 2024 13:59:42 GMT

Yes, if you generate a new password it will void the old one. There's a link to Sky's app password generator in their help guide here: https://www.sky.com/help/articles/problems-accessing-sky-mail-from-your-email-app

Re: Possible Hacking - would like to remove app password

jayach — Mon, 05 Feb 2024 15:00:56 GMT

@Mark39 wrote:
Yes, if you generate a new password it will void the old one. There's a link to Sky's app password generator in their help guide here: https://www.sky.com/help/articles/problems-accessing-sky-mail-from-your-email-app

I don't believe that is true, you can have multiple app passwords. (you may well have multiple apps)

Thses are mine:

As you can see there is an option to remove access from them.

To see and manage your app passwords go to https://www.sky.com/myaccount/my-details and scroll down to Sky Yahoo Mail access.

Re: Possible Hacking - would like to remove app password

Mark39 — Mon, 05 Feb 2024 15:17:25 GMT

Yes, you're right @jayach. I hadn't spotted the remove access link. Apologies to @Roger1939

Re: Possible Hacking - would like to remove app password

GoukiMaster — Wed, 08 May 2024 16:23:53 GMT

The url goes straight to the app generator for me - no option to manage existing app passwords. The screen I've seen posted here a couple of times, is only accessabe for me through the Yahoo side, thus when I click on 'remove app password' there it doesnt do anything.

Note, I am removing app passwords as I trialled Thunderbird and Mailspring, and Thunderbird did something shady when I didnt even have the client open, so I dont trust it. Mailspring states it definitely keeps the password locally, but meh.

Re: Possible Hacking - would like to remove app password

GoukiMaster — Wed, 08 May 2024 16:26:49 GMT

Whoops. No edit button here??

Yes, multiple app passwords are in use concurrently; ignore that message on the screenshot. My Outlook client still works with the app password from years ago, and when I created the Mailspring one today, Thunderbird still worked.

Re: Possible Hacking - would like to remove app password

jayach — Wed, 08 May 2024 17:02:47 GMT

@GoukiMaster wrote:
The url goes straight to the app generator for me - no option to manage existing app passwords.

That's because Sky have updated the "My details" page, and the "Manage" option now goes straight to the password generator. I suspect that is an error in the page's links, but have no idea how we can feed that back to Sky.

Re: Possible Hacking - would like to remove app password

jayach — Wed, 08 May 2024 17:12:00 GMT

@GoukiMaster wrote:
Whoops. No edit button here??

There is an edit option, but it is only available for a short while after posting.

Re: Possible Hacking - would like to remove app password

GoukiMaster — Wed, 08 May 2024 18:03:52 GMT

No reply option for me; I registered this account about five minutes before I posted though, so it may be a new user restriction (which sounds and is quite stupid).

I think I'll tweet Sky my screenshot, asking them how to access managing app passwords.

IF theres a response I'll post a link to the tweet here, even if its a 'bear with us'.

Re: Possible Hacking - would like to remove app password

GoukiMaster — Thu, 09 May 2024 14:52:13 GMT

Right, I got a response from the Sky Tweeters, they just sent a link to DM them. I sent a four screenshot-with-notes message, and also linked this discussion here, so they can have more information. Theres earlier screenshots here showing the Sky portl displaying a list of app passwords, which I cannot even get to; I can only seeing a list on the Yahoo portal.

Will update if necessary if they message me rather than posting here.

Re: Possible Hacking - would like to remove app password

jayach — Thu, 09 May 2024 18:07:22 GMT

@GoukiMaster

Thanks for that, perhaps they can feed it back to the website admins and get the "manage" link updated.

Re: Possible Hacking - would like to remove app password

GoukiMaster — Fri, 10 May 2024 00:36:47 GMT

*sigh*

I'll call them tomorrow and explain that the issue is global.

Re: Possible Hacking - would like to remove app password

GoukiMaster — Fri, 10 May 2024 15:42:26 GMT

I am currently on hold again...

I was informed that it was a decision by important people at Sky to remove the abilty to manage existing app passwords as customers were complaining of email access breaches....

I have ever, ever, ever so gently informed the CSR that an app password will work until revoked, and that if I have a security breach, I could change my password 100 times but that app password will still work...

This is why I am on hold again.

I dont think it will come to a positive conclusion on this one phone call...

Re: Possible Hacking - would like to remove app password

GoukiMaster — Fri, 10 May 2024 16:02:54 GMT

Hello all.

I sould have recorded the call so I could transcribe the contents.

So, bottom line;

WE HAVE REMOVED YOUR ACCESS TO MANAGE YOUR EXISTING PASSWORDS, AND THATS THAT.

I have left the CSR with the following in regards to how this is unnacceptable:

"What if I lose my laptop / it is stolen, andhas Outlook on it, which has an app password? Am I going to give this thief unfettered full access to my email forevermore? Changing my password won't kick them out; how do I remove access?"

The operator was a good bloke, he said he will feed this back again, and request that someone posts a statement here, by a SuperUser regarding this.

Anyone have any thoughts? I'm too steaming at the moment, not with the CSR, but with the higher ups who declared that this is the way its going to be now.

Re: Possible Hacking - would like to remove app password

jayach — Fri, 10 May 2024 18:08:00 GMT

@GoukiMaster wrote:
Link to a new post regarding this being a deliberate action.

Looks like someone has joined your new thread (if that is what you started ) back into this one.

What you are being told doesn't, as you say, make sense.

Not being able to remove app password is a security risk.

I can't see how being able to remove/rescind an app password is a security risk.

A previous poster complained that they hit a limit on the number of app passwords they could create, but they seemed to be creating new ones frequently.

Re: Possible Hacking - would like to remove app password

GoukiMaster — Sat, 11 May 2024 12:27:47 GMT

As previously mentioned, you can see your existing app passwords through the Yahoo portal, however you still cannot delete them from there. It is currently Sky's responsibilty to allow access to manage App Passwords.

The 'delete app password' button does NOTHING on the Yahoo portal, it just refreshes the Recent Activity page into the Security page.

Re: Possible Hacking - would like to remove app password

Cat37 — Fri, 14 Jun 2024 09:46:30 GMT

Did anyone find out the best way to deal with this? I just rang sky and they said they can't do anything with this as it has to be done on our end, but I explained I can't delete the app password. They then advised to ring yahoo. I have changed the password on the email account and logged all devices out, I'm assuming they can log in still with this app password?