Hello There, Guest!
Howto: Keeping your account details safe!
28-09-2010, 11:10 AM | Post: #1VitalBullet Go to next important person...
Today we bring you some helpful hints and tips towards helping you keep your account and your personal details safe.
Your account details are only as safe as you make them, and to make them as safe as possible you need to keep your login details to yourself, and not share them with ANYONE!
Also note that EA will never ask you to reveal your password, or initiate contact with you asking for answers to your password security questions.
When logging into any EA service you will be required to use your e-mail address (similar to a username) to identify which account you are logging into.
We recommend that you never tell anyone the e-mail address of your account. If you wish for other people to e-mail you, try using an alternate e-mail address or perhaps stick to using the PM function on the forums.
Along with your e-mail address you will be promoted to enter a password to verify you are the owner of the account. Passwords are the most crucial key to keeping your account secure and as such, should be kept safe above all else.
We recommend that you use a strong password that cannot simply be guessed. Many people who lose their accounts to others do so simply because they give out their account e-mail address, and because of a weak password, accessing the account becomes as easy as guessing the password. Many accounts are lost because the owners use weak passwords like "password" or "12345678". These are NOT strong passwords.
As well as being alphanumeric, passwords are case sensitive and also allow special characters to be used. We recommend that you use this to your advantage and use a password that contains a mixture of these. Also try to make your passwords longer, the more characters and variation the stronger the password.
09-12-2010, 12:46 PM | Post: #2ShadeShooter
Phishing websites, dodgy links and things that can be deemed as too good to be true
Phishing in a simple explanation is creating a dummy website or URL of another website that requires users to log-in. This allows the Phisher to grab account details and can have nasty effects for anyone that falls for this kind of vile scam.
Below we have outlined some very simple and helpful methods of protecting yourself from having your details stolen by such attempts. In fact a great method of protection is to ask yourself this question:
"I almost/have lost my account due to this, what can I do to prevent this from happening again?"
We are not asking you to be paranoid every time a link pops up but sometimes acting cautiously can be the difference between having the account you have worked so hard to level up (and in some cases spent money on) and losing it within a second.
So there are a couple of minor things you can do that can have a major impact.
Check the URL - In most cases, a web browser will have a "status bar" at the bottom of the window (in some browsers this can be activated and deactivated in their options menu) The status bar is a very powerful tool and only requires you to hover your mouse over the URL.
For example: Hover over any link on this site to find the URL states http://www.battlefieldheroes.com
Turning on Phishing and Malware notifications - Again dependant on the browser, this can be turned on or off in the options menu or might be activated as default. A warning will pop up stating that a website might be after your account details. These warnings are there for your protection...if it pops up, it is usually a good choice to listen to it.
Of course there are exceptions to this, such as http://static.battlefieldheroes.com and http://cdn.battlefieldheroes.com. These are both EA owned and you are very safe with these two.
IP lookups, WHO IS and DNS hostname look ups - Now these are more complex but they give a lot of information about a website and IP address.
For example: A few days ago, people noticed a web address of http://220.127.116.11/ As normal, people assumed this was a scam attempt, however after using an IP address/Domain Name lookup website I was able to tell these people that the IP address was an EA owned address, which sometimes pops up rather than the web address. Overall the same can be done with any URL that you are not sure about.
Type in the URL of the actual site/use a bookmark then log-in - This one beats a lot of phishing sites and can be done for those that gain scam emails that mention "password resets" or "you need to change your password"
Instead of clicking on the link, simply right click on the link, copy and paste it into the address bar and replace the bit between www. replacethisbit.com...so if we use the change password example.
"You need to change your password visit http://www. fakewebsiteimadethisup-heroes.com/passwordreset.blah"
Instead of clicking the link or typing it all out, you would type http://www. battlefieldheroes.com/passwordreset.blah
Using Plug-in/Extensions for web browsers - Web browsers have come a long way within technology, so much so that now there are amazing plug-ins that can be added instantly to your browser that not only offer fun and interesting things but also tighten the security of your browser and Internet. Always make sure that you are downloading these plug-ins from their official creator websites, such as http://www.mozilla.com for Firefox and https://chrome.google.com/extensions for Chrome
If it's too good to be true, it probably is - Common sense can be very handy, if someone or thing is promising something that you know could be dodgy (for example: FULL ADVENT CALENDAR CAN BE FOUND HERE!) then DO NOT CLICK THE LINK, DOWNLOAD OR LOG-IN FROM THAT SITE
If there is anything that you aren't sure about or do not understand within this post then feel free to send a blue poster a PM.