Live data from Hacker News

Ask HN: What happened to trigger my Spotify password reset?

news.ycombinator.com

11–16 of 16 posts

Re: Ask HN: What happened to trigger my Spotify password reset?

#11

I had a similar issue not long ago. I went in and really changed it into a massive 50 character pw. My spotify account was hijacked in 2017 and managed to get it back - someone from Tunisia - he had the audacity to start creating playlists full of autotune rappers. I wouldn't mind sharing but man his taste in music was awful.

Was there some kind of big breach in 2017? My account wasn't even pro! I just logged into my account after a couple months and someone else was using it!

Re: Ask HN: What happened to trigger my Spotify password reset?

#12

I had the same message a few days ago. I have family premium, so, I checked the family invites, and, there were 3 unknown invites that I hadn’t seen before (they hadn’t accepted them yet though). It seems odd that I wouldn’t get an email saying that a family invite was sent out.

Netflix has a great service of showing where the account was logged-in from. Spotify would benefit from the same.

Re: Ask HN: What happened to trigger my Spotify password reset?

#13
Yesterday my account displayed "currently playing on another device" on a browser I've never used, and I also noticed music from russian artists/letters I've never played in my song history. Signed out from all locations, and changed password and I haven't had any other issues yet.

Re: Ask HN: What happened to trigger my Spotify password reset?

#14
i used a password for Spotify i used nowhere else...and yes...lots of music and artists and albums are being deepfaked...it's kinda fun..it doesn't seem to be malicious in my case but perhaps it is...but yeah...artists all of a sudden everywhere resemble my ex-boyfriend...hmmm ....some songs are actually delivering beautiful and insightful messages seemed to be tailored towards me too

Re: Ask HN: What happened to trigger my Spotify password reset?

#15
I received a 'Reset your Spotify password' email yesterday, sent to a unique email address I use only for Spotify. (And it's not of the commonly-used user+spotify@domain.com format.)

The only ways I can imagine someone would get that email address are:

A) From Spotify (i.e. breach)

B) From Google (as I linked my Spotify account to Google Home, which presumably shares the registered email address)

C) From some poor security practice on my part (e.g. maybe I entered the email address on a phishing site, or have malware on one of my devices, or someone has access to my email, ...)

D) Guessing it.

I had presumed C or D, but given the timing of your post, I'm now not so sure...

Re: Ask HN: What happened to trigger my Spotify password reset?

#16
post #8
post #2

They check passwords against other hacks, so if you used the same email-password combination somewhere else that would cause them to reset your account. https://www.businessinsider.de/spotify-users-password-reset-... "Spotify's security team identified that some of the leaked user credentials might correspond to Spotify accounts"

My email for spotify login is unique, and of the form *+spotify@gmail.com

I assume that’s checked for. For simple SaaS projects compared to Spotify at least, things like that were checked.
Post reply on HN