You are viewing a single comment's thread from:
RE: Meantime Joke / How Deep Can Love Go?
That's how the security mechanism of the blockchain is designed. And it makes sense when you think about it. Otherwise I could execute the recovery process without the permission from the users (I could change their keys without asking them).
Also it is required to enter the old Private Owner Key to confirm the recovery request. If an owner loses his keys, there is no way to recover his account. The Account Recovery is there to recover an account in case of a hack.
Thanks for noticing me. I think I didnt understand completely. Do you mean @sw-test can sign in with previous private key(a private key before changed by hacker) on sw to confirm the request?
Hey, you are right! There must be a possibility to enter the account name or sign in without the Posting Key in order to be able to accept the request, if the password was changed from the other side. It worked before, because it was on the Dashboard page and there was no login required.
Thank you very much for this important discovery! I will fix it now ;)
Update
It is fixed now and I was able to accept the request for @sw-test without signing in. There is now a new input field for the account name:
Wow, awesome! Thanks for your feedback :)
It looks working correctly!
Have a nice day @steemchiller!