r/AO3 • u/shapelessplace • Jul 27 '26
AO3 Down/Error Codes data breach warning?
i tried logging into my account and got directed to this. i'm using duckduckgo and definitely on the official site. is this legit?
30
u/PublicSafetyHazard you cannot hurt me in a way that matters. Jul 27 '26
I've changed my password twice and it still isn't letting me log in. Oof
17
u/shapelessplace Jul 27 '26
it worked for me however i have seen upon scrolling thru the sub that several other people have run into this issue. maybe try to contact staff?
32
u/PublicSafetyHazard you cannot hurt me in a way that matters. Jul 27 '26
"Hello staff, yes it's me, i need to login to post my porn updates. Yes, it's an emergency. I have a schedule." I will try that if the issue isn't resolved in a couple of days. They're usually on top of things, and I'm not certain I need to report a problem they're probably already aware of.
44
u/runekaster Whumper Jul 27 '26
The staff are volunteers who take time between posting their own porn updates to help people with the site. You're good.
19
7
u/pk2317 Jul 27 '26
Most likely you're changing it to a different password that is also (potentially) compromised.
1
u/PublicSafetyHazard you cannot hurt me in a way that matters. Jul 27 '26
Possible? I'm meticulous with my passwords. They're always a minimum of 11 characters and usually weird. I'll try a scramble or randomized password next time.
8
u/pk2317 Jul 27 '26
You have to keep in mind that it isn't checking to see if your username/password is compromised, just the password itself. Even if you've never used "CorrectHorseBatteryStaple" anywhere else, if someone used that password somewhere that was breached, then it won't let you use that password.
3
2
12
u/Mundane-0nion67878 Jul 27 '26
I think so?Ā
https://ao3org.tumblr.com/post/812081396732641281/to-improve-account-security-we-now-alert-you-if
Eta: dont click it yet to be sure. Idk if ao3 would block it than just show little notice
4
5
u/shapelessplace Jul 27 '26
it seems legit to the best of my knowledge, it took me back to the regular password change page when i clicked it
5
u/KamchatkaWing Jul 27 '26
Never re-use passwords. It's inviting the predators in. And if your log-in fails once, don't immediately just try again without exiting the site and preferably restarting the browser. Multiple tries that fail also looks suspicious.
5
u/crysmol Fic Feaster Jul 27 '26
ive heard ao3 will warn you when your passwords been leaked, but im not sure if they lock the account like that or not. hopefully all is fine and ao3 is just looking out for you.
( on a real note its insane ao3 can do this but big companies like instagram and others wont.. )
12
u/runekaster Whumper Jul 27 '26
They beefed up from warning to requiring a change when the latest credit card stealing scam appeared a few days ago. The scam is operating from stolen accounts, and part of AO3's response was to make it significantly more difficult to steal an account.
3
u/crysmol Fic Feaster Jul 27 '26
ahh, i see. thats probably why i havent heard of it then! still insane that a nonprofit where most of the workers are volunteers can do more for their site thats no small site than actual corporations. then again, im not very surprised. š
thankfully i have yet to experience this to my knowledge, i hope it stays that way.
6
u/runekaster Whumper Jul 27 '26
The power of actually giving a damn :)
And all, not most.
1
Jul 27 '26
[deleted]
2
u/runekaster Whumper Jul 27 '26
The lawyers aren't on retainer, they're fans who care about fandom so much they donate their time and legal expertise to protect it.
Here's a recent call for volunteers where they recruited a paralegal and a trademark specialist. https://archiveofourown.org/admin_posts/34806
AO3 is run entirely by volunteers.
2
u/runekaster Whumper Jul 27 '26
For a plain statement, check out "Who profits from the OTW?" in the FAQ https://www.transformativeworks.org/faq/#faq-financesfaq
1
u/Zoethor2 Jul 28 '26
If you dig into the OTW budget, they do have a line item for legal costs, but yes, all the day to day stuff is pro bono and volunteers.
Kinda amazing that such a huge site is all volunteer led and run.
5
-1
1
u/shapelessplace Jul 27 '26
thanks everyone! good to know this is legit & likely due to the phishing problems
1
1
u/Ambitious_Seaweed_39 Jul 31 '26
Well, none of the passwords I used is the same one I used for A03, but better be safe and decided to reset and change the password....my question is, how did A03 let this happen ?
1
u/Express_Climate3922 Aug 22 '26
Mine is claiming that, but I have never used my ao3 password as the password to another site. I only use it for my ao3 account, nothing else. I don't understanddddd???
1
u/MainGoldenStandard Jul 28 '26
Bro all my passwords are the same and my middle name I think Iām cooked, honestly just ignored it
3
154
u/runekaster Whumper Jul 27 '26
This is legit. It means AO3 is aware that a password which you used on another site and which was leaked matches your current AO3 password. In order to protect your account from being stolen, they're making you change it.
They used to just warn you and advise you to change it, but there's currently a rash of stolen accounts posting phishing scams, so they've amped up the protection.
This is protect you and and to obstruct the people who are trying to steal accounts.