Sketchy email telling me to reset my pw

[plasticuproject]

I just received an email stating:

"To protect your Spotify account, we've reset your password due to detected suspicious activity."

I have since REQUESTED and successfuly changed my password.

My question is, what is the nature of the suspicious activity you referenced? Login attempts? Can you provide me a log file containing all login attempts with timestamps and IP addresses for the last 24 hours so I can get to the bottom of this?

It's really rare for a company or service to initiate a password change on their own, without prompting.

Thank you.

[OneByBoo]

Hey there @plasticuproject,

thanks for posting in the community !

As Spotify are doing their best efforts keeping each and every user protected from suspicious activity that may take over accounts like happens on many other services, if they feel there were some attempts to take over you account they send the mail you're just mantioned getting.

Sometimes user passwords are to weak and they suggest to switch or change them.

If you wish to make sure it isn't some sketchy mail you just got, you can send a printscreen of it here and i'll check it out for you.

Hope this helps 😃

[plasticuproject]

The email was cert signed, so I know it's legit. And my passwords are all
strong to very strong. I'd just like to know if they did it because of
excessive login attempts or if there was another reason. And if it was from
bad logins, I'd like to have the IPs and timestamps to investigate this
myself.

Thanks for the reply.

[plasticuproject]

Also, if it was from failed attempts, I don't see how changing my password would help anything, as the attacker hasn't gained access, so my password is still secure.

[OneByBoo · Accepted solution]

Hey there @plasticuproject,

thanks for the quick response!

As mantioned, the mail you're describing can also be a support recommendation.

If you feel secure with your password you can just ignore it.

However, i'm not sure about how or if you'll get the info you want to have to investigate it yourself but you can always contact support through this contact pag and try.

Hope this help.

I'm always around if you need anything else=)

[plasticuproject]

Thank you for the link, I was actually looking for something like that before posting here.

Unfortunately I couldn't ignore the email, because it included:

"You need to create a new password to log back in. Just click the big green button."

I will contact them via the link you provided. It shouldn't be hard to provide me what I am requesting, simply greping their logs with my credentials would yeild the results that I am requesting.

Thank you for your help.

[OneByBoo]

Hey there @plasticuproject,

Glad i could help.

Please reply back to the post and let me know the outcome of such request so we can lead other users who had experienced the same issue.

Have a great weekend 😃

[plasticuproject]

Via a live chat session, I sent them a message/question requesting the
information I desired. The support person directed me to visit my Account
Profile Overview, then to the Privacy Settings page. In there is an option
to request to download your data. It says give them up to 30 days to
prepare the data and I will receive an email when it is ready to download.

The data should be all of my account activity for the last 90 days.

I hope you can help others out with this information, and again, I thank
you for your quick response and help.

[OneByBoo]

Hey @plasticuproject,

Glad i could be an assist and that you'll get the info desired.

Enjoy Spotify 😃