If you use myfitnesspal, change your password...

[Phentex]

it's a program that's been discussed here in the lounge so I thought I would mention the latest breach.

I can't remember when I signed up (on an old Hotmail account) but I checked my profile and I had used a made up nonsense name. And I had a stupid password that I didn't remember and have never used anywhere else.

But I had been wondering why I got so many emails from Under Armour. I never ordered anything from them. I thought maybe I had looked at the site once for my son or something.

https://www.washingtonpost.com/news/the-switch/wp/2018/03/29/under-armour-announces-data-breach-affecting-150-million-myfitnesspal-app-accounts/?utm_term=.af4926d4f407

[Croney]

1. I saw that and changed my pw.

I'm not too concerned because I never put correct birthday and other vital info on a site that doesn't need or verify it. Thanks for your post!

[hlthe2b]

2. AND, important: if the password used for MFP was used for ANYTHING else, change them too!

I had been working on upgrading passwords when I got this notice. I found the same fairly simplistic password used for MFP (and fitbit) had also been used for a online utility (linked to my bank account for online payment) and a couple of other sites.

I have used a password app for many years now (Ascendo Datavault) and "religiously keep it updated across multiple devices. But I'd just started using its extremely complex password generator. Now, I'm using it for nearly all, as well to store.

If you are a procrastinator (as I am) DON'T wait to address this!

[Phentex]

4. I have really stupid passwords...

it's a flaw because I have to write them down until I get used to using them. So for sites that aren't often used, I gotta find the book. I don't use the same one twice anywhere.

Sometimes it makes sense after I look it up but most of the time it's "Where the heck did that come from?"

[hlthe2b]

3. As you undoubtedly know now, UnderArmour bought MFP several years ago.

I have never ordered from them either, but I use MFP daily to track diet and exercise and to link with my fitbit. It has a very powerful recipe analyzer to calculate calories and nutritional breakdown and their basic calorie analyzer for other foods, including commercial products is incredibly up to date and comprehensive.

But, yeah, the purchase by UnderArmour (though the site remains free) has now placed extra security risks, so you need to maintain strong login and password protections if you are going to use the site--or delete your account.

[Phentex]

5. I didn't know you could link it with fitbit!

I guess I'm not using it like I should.

[hlthe2b]

6. yes.. It has been the one free app I use daily. They have a premium service (since UA) but

that is definitely not necessary to get the benefit.

Moving from simple passwords that I have some possibility of remembering, changing only slightly from one to another with numbers and characters, has been a hard habit to break. And there is NO way I'd ever get the complex nonsensical ones created by my password storing app, but that is why they are so hard to "break' and so necessary to keep the synced across multiple platforms. I print them off and put them in a safe place a couple times a year too, just in case.