Possible Hacking - would like to remove app password

[Roger1939]

Hello 

It appears that my email has been hacked as I have been informed that I have sent emails to most of my contacts this morning.

I have since logged out of all other devices, changed my password and I have activiated 2 step verification but further emails have been sent. 

I can see the following IMAP activities but when I click on "Delete app password" nothing seems to happen:

******************************************************************************

Email application (app password: Windows computer_X_df4cdad876d04db48ebcd574f695b795)

Stockholm, Stockholm, Sweden

2 hours ago

Delete app password

******************************************************************************

I can see that an App password was added this morning but it was not added by myself, can you advise how it can be removed please?

[caesarome]

An app password is only needed if you use an app or program like Outlook so if you need to you can generate another one:

https://www.sky.com/sky-yahoo-mail/manage-apps?client=email

Although I can't see how someone you can get access to whatever app or program you use ?

[Mark39]

I doubt you'll be able to use the link you posted to delete an app password. Sky Yahoo Mail app passwords are not the same as Yahoo app passwords.

I'd suggest replacing the app password in whatever app you're using by generating a new app password.

I suspect you've not been hacked but have given away your login credentials by completing a fake login screen. If that's the case, you'll first need to change your standard Sky login password via the forgotten password link here and check for any filters set up on your email account: https://www.sky.com/signin/email 

[Roger1939]

Thank you Mark

That all makes sense (embarrassingly),  can I confirm if I setup a new application password it will remove the other one?

[Mark39]

Yes, if you generate a new password it will void the old one. There's a link to Sky's app password generator in their help guide here: https://www.sky.com/help/articles/problems-accessing-sky-mail-from-your-email-app

[jayach · Accepted solution]

---

@Mark39 wrote:

Yes, if you generate a new password it will void the old one. There's a link to Sky's app password generator in their help guide here: https://www.sky.com/help/articles/problems-accessing-sky-mail-from-your-email-app

---

I don't believe that is true, you can have multiple app passwords. (you may well have multiple apps)

Thses are mine:

As you can see there is an option to remove access from them.

To see and manage your app passwords go to https://www.sky.com/myaccount/my-details and scroll down to Sky Yahoo Mail access.

[Mark39]

Yes, you're right @jayach. I hadn't spotted the remove access link. Apologies to @Roger1939 

[GoukiMaster]

The url goes straight to the app generator for me - no option to manage existing app passwords. The screen I've seen posted here a couple of times, is only accessabe for me through the Yahoo side, thus when I click on 'remove app password' there it doesnt do anything.

Note, I am removing app passwords as I trialled Thunderbird and Mailspring, and Thunderbird did something shady when I didnt even have the client open, so I dont trust it. Mailspring states it definitely keeps the password locally, but meh.

[GoukiMaster]

Whoops. No edit button here??

Yes, multiple app passwords are in use concurrently; ignore that message on the screenshot. My Outlook client still works with the app password from years ago, and when I created the Mailspring one today, Thunderbird still worked.

[jayach]

---

@GoukiMaster wrote:

The url goes straight to the app generator for me - no option to manage existing app passwords.

---

That's because Sky have updated the "My details" page, and the "Manage" option now goes straight to the password generator. I suspect that is an error in the page's links, but have no idea how we can feed that back to Sky.

[jayach]

---

@GoukiMaster wrote:

Whoops. No edit button here??

---

There is an edit option, but it is only available for a short while after posting. 

[GoukiMaster]

No reply option for me; I registered this account about five minutes before I posted though, so it may be a new user restriction (which sounds and is quite stupid).

I think I'll tweet Sky my screenshot, asking them how to access managing app passwords.

IF theres a response I'll post a link to the tweet here, even if its a 'bear with us'.

[GoukiMaster]

Right, I got a response from the Sky Tweeters, they just sent a link to DM them. I sent a four screenshot-with-notes message, and also linked this discussion here, so they can have more information. Theres earlier screenshots here showing the Sky portl displaying a list of app passwords, which I cannot even get to; I can only seeing a list on the Yahoo portal.

Will update if necessary if they message me rather than posting here.

[jayach]

@GoukiMaster 

Thanks for that, perhaps they can feed it back to the website admins and get the "manage" link updated.

[GoukiMaster]

*sigh*

I'll call them tomorrow and explain that the issue is global.