Ask for additional information to verify before changing email address
All the information I was asked for (to change my email address within my ultra.cc account) can be easily found within the ultra.cc account, so if someone were to hack into it, then they would have access to all of that.
It may be worth it to ask for additional information. Like asking that a specific (random) passphrase be sent to a certain discord channel that is associated with the account (maybe that doesn't allow non-staff to read past messages, but staff can see it all), sending a verification email to the email address on file, or having a backup email address within file that requires some sort of verification from that.
I understand that there is a slim chance that would happen, as this is a paid service, but always better to be safe rather than sorry.
Comments1
varg
May 27, 2025
We want to assure you that we take the security of our clients and their accounts very seriously. While we appreciate your concerns, we would like to clarify that not all information required to process an email address change is accessible solely from within your Ultra.cc account.
Some of the information we request must be obtained through third-party platforms. This functions similarly to sending a verification email and serves as an additional layer of protection.
That said, we genuinely appreciate your suggestions. We're always looking for ways to further enhance our security measures, and ideas like yours help us identify potential improvements.
Thank you once again.