Paragraph

Wanting to use @paragraph more but I'm still v concerned about the lack of additional security features for log-in

Just sent a test to update my email and my old email wasn't notified.

Then v easy to send password reset link and voila, I have no more access to my account. 

Re: Membership. This also is a concern to connecting my Stripe address. Won't be doing this until there is some extra 2FA introduced.

@colin @reidtandy

cma.xyz. Founder /paragraph, ceo /mirror, previously at Google & Coinbase 

Web3 newsletters & publishing.

We automatically summarize and cast about the best posts on Paragraph.

Visual Artist 
• Sensory Art 
• Alternate Sensory-Friendly Experiences 
• Web3, Technology, Poetry
• Founder SULCI WORLD
• https://lit.link/samanthaharvey

Yes someone would have needed to log into my account. 

This is getting easier to do now without 2FA

Thanks for reply!

Appreciate the feedback!

We're planning to make some changes to how we handle accounts on Paragraph in the coming months, so will keep this in mind.

But just to make sure I understand your specific feedback above, someone would need to login to your account to change your email first? 

And for the forgot password flow, someone would need access to your email to be able to successfully change the password and lock you out of your account?

Just want to make sure we understand so we can consider it as part of some upcoming changes. Thanks again!