Several accounts have been broken into this week, here are some tips / reminders of what you can do to keep your NG account more secure:

1. Use a strong password, meaning a long combination of various characters. Avoid single words or common phrases.
2. Enable 2FA on your account. This can be done via the “Login Options and 2-Factor Authentication” link on your Account page.
3. Consider also choosing the option to log in with your email address instead of your username, so any attempts to log in using your username will fail. You can also do this via the Login Options page.
4. Make sure your email address is up-to-date and your account isn’t connected to an email address you no longer have access to.
5. Use a unique password for each platform you use, so a compromised account from one place doesn’t impact your account in other places.

2FA is highly recommended, especially if you’re an artist account that will be a larger target.

RIP Jim Melon:

Let's play Hangman!

damn turns out I used a very old email which I don't have access to anymore to register. good thing this post exists otherwise I'd probably never have noticed.

A good idea would be to go to https://www.newgrounds.com/account#

Select "Download options" and download your projects, including PMs.

Saving all of your stuff on multiple external hard drives is a good idea and make sure your file structures are organized so you can find all of the things you have saved.

https://www.newgrounds.com/pm/sentbox

You can also click "Manage Messages" -- Select All

And delete any messages to increase space.

Create an archive folder for all your projects, which should also encompass tips, tricks, and the pipeline. Save this on an external hard drive; having two is advisable. 

A 1 TB external hard drive costs $50. 

I have mine named "-- Archive" So it shows up at the top of the Windows file structure.

well i never been hacked in my life and they only hack people who haven't post in a long time

i already changed my password and locked it to email only which i do have my email up to date as well as block PMs from random people

Unlocked 2FA!

Just putting this here as well:

If you play any *ahem* very competitive video games (or participate in communities with a known terrible reputation)-- and if you use services set up by your guild/website that are independent of that game (forums, statistics tracking, recipe builders etc) one thing that will help you immensely:

Clear your browser cookies when you are finished using those services and;

don't use the same password, even if its for stuff you don't care about!

Angry nerds with administrative access to your guild services (and money/SEO training) have figured out they can track what websites you go to and visit-- this isn't necessarily because they are dickheads but because they are looking to see if you are a spy for an enemy guild. They don't have to hack your computer-- they just need you to have that stupid cookie and track you that way!

Now apply what I just told you if someone REALLY hated you and had your email address and the common throw away password you use everywhere.

I was a victim of this. Even if you think I'm full of crap it doesn't hurt to stop normal advertisers from tracking you anyway. Check your browser's settings and tick that box to erase your cookies when you close your browser, and use a password manager.

Thanks for reminding me to secure my account! :D

Not just on NG, but my email and other sites I use religiously!

how do they get in?

because either;

1. You use a common password that can be guessed or;
2. An account you had previously was compromised and on a list somewhere on the darkweb-- and that password ends up on a combo list with your email address and if you used that password everywhere they will try it.

oh. will they pm you also to try to get into it?

You'd have to be very naive to fall for something like that. I'd like to think the majority of NG users are aware of simple social engineering threats-- but being I used to work in technical support for a large ISP people always surprise me that something I think is common knowledge... isn't. :/

If you use a shared computer in a library, school computer lab or the family PC you should also be mindful that you're logging off of your account and the PC when you're done using it. You can also manage your active sessions in account settings.

Practice good Internet hygiene. Wash your hands and feet and clear your browser history.

Now my account is BUFF!!!!1!1!1!1!!11!!1!1!1!!!!11!11!1!1!!1!1!1!1!1!1!!

another thing to remember is this simple rhyme

think, think, think before you click that link, link, link

2FA is just common sense in this day and age.

That's what you're saying rn

I Got An 2FA On My Account Tom!

Hackers are a bunch of piece of filth!

They're out to get us. Enabled 2FA, sucks to do it each time but rather that than losing everything.

Atleast I don't have to do a captcha each time!

Is there a reason I can't access my login options page with my password? I can login to the site normally perfectly fine. I can't be mistyping it because I'm pasting it in from a password manager.

Account Security is important, but now we all have to worry before the end of 23.

Mr. Google said to me that I needed to change the password. I changed it and now I do the 2FA Enable. Protect your accounts and I hope nothing happens to all :)

I feel very sorry for those who got hacked. How much damage was dealt?

- Crazymonkey154

godammit Tom I told you tomcfulp wasn't a good password for an admin account!

You are very lucky. Keep up the good work.

The hackers are still here

For example: @chickenwings007

Well damn, I haven't expected that coming! How did I not notice this hours prior?

I Think Im Safe ... Thanks Again Tom ...