eBay publish “Important Password Update” message
eBay have posted a message signed off by Devin Wenig, President, eBay Marketplaces asking users to change their passwords. The message is linked from the eBay home page or can be found at eBay.co.uk/reset.
Changing your password on eBay Mobile Apps
What the message doesn’t tell you is how to reset your password if you’re using an eBay mobile app. The answer is that you can’t. If you’re a mobile app user you will need to log onto a browser and the main eBay site to change your password.
We know there are millions of eBay mobile app users and suspect that many of them have never visited the main eBay site but instead purely relied on their mobile device for eBay shopping. That may be even more true in countries other than the UK.
Hearts and Minds
What’s missing in the message is the word “Sorry”, or any advice on steps you can take to protect yourself from identity fraud. Personally I’m not that bothered – the information snatched from eBay is pretty easy to come by anyway if you know where to look on the net (for instance apart from your date of birth many UK business sellers publish the other information – address, email, phone number etc – on every eBay listing). That won’t be true for many however who will listening to the scaremongering about their bank accounts being raided or receive a phishing email which suddenly seems much more sinister than the one they received last month or last year.
eBay need to send a strong message to buyers that eBay is a safe place to do business, and the “Important Password Update” message is a good start. Here at Tamebay we look forward to the battle of hearts and minds which in some ways is far more important than the security breach itself. The press are on one side (eBay security breach is a great big juicy story that will run and run), eBay are on the other. eBay need to win the war.
Here’s the full text of the message from Devin:
Important Password Update
Keeping Our Buyers and Sellers Safe and Secure on eBay
On Wednesday, we announced that we are asking all eBay users to change their password. This is because of a cyberattack that compromised our eBay user database, which contained your encrypted password.
Because your password is encrypted (even we don’t know what it is), we believe your eBay account is secure. But we don’t want to take any chances. We take security on eBay very seriously, and we want to ensure that you feel safe and secure buying and selling on eBay. So we think it’s the right thing to do to have you change your password. And we want to remind you that it’s a good idea to always use different passwords for different sites and accounts. If you used your eBay password on other sites, we are encouraging you to change those passwords, too.
Here’s what we recommend you do the next time you visit eBay:
1) Take a moment to change your password. You can do this in the “My eBay” section under account settings. This will help further protect you; it’s always a good practice to periodically update your password. Millions of eBay users already have updated their passwords.
2) Remember to always use different passwords on different sites and accounts. So if you haven’t done this yet, take the time to do so.
Meanwhile, our team is committed to making eBay as safe and secure as possible. So we are looking at other ways to strengthen security on eBay. In the coming days and weeks we may be introducing new security features. We’ll keep you updated as we do.
Thanks for your support and cooperation. eBay is your marketplace, and we are committed to keeping it one of the world’s safest places to buy and sell.
President, eBay Marketplaces