• Resolved danjde

    (@danjde)


    Hi Staff,
    I receive every day some site hacking attempts by the password recovery functionality.

    These attempts, use unlikely but sometimes very similar users, and and even if the site connection is over https, I wouldn’t want them to succeed in the attempt.

    I think that a good idea should be to pubblish every contents, over a “pseudonym”, that is a simple fake user, as a nonexistent user, instead of hide totally the publisher name.

    Thus, it would become impossible to trace the real username for the attackers.

    What do you think about?
    Is functionality included in Wordfence plugin or is there a need to install a specific one for this purpose?

    Many thanks!

Viewing 4 replies - 1 through 4 (of 4 total)
  • Hi @danjde,

    Currently, Wordfence does not have a feature to hide or replace usernames.

    “Should you hide/replace usernames?” is a commonly asked question.

    What I believe is that as long as you have a strong password and you have 2FA enabled, your account should be secure enough. Relying on masking or hiding your username should not be your intent for security.

    Dave

    Thread Starter danjde

    (@danjde)

    ..and you have 2FA enabled

    Concerning this, could you suggest a way without using Google?

    ..masking or hiding your username should not be your intent for security

    Well

    Many many thanks!

    Davide

    Hi again,

    You can use 2FA with another program such as Authy or many others. Google Authenticator is only one of the apps that Wordfence supports for 2FA.

    Dave

    Thread Starter danjde

    (@danjde)

    Excuse me again, but in a only OpenSource perspective, could be fine AEGIS?

    https://f-droid.org/it/packages/com.beemdevelopment.aegis/

    Thanks again!

    Davide

Viewing 4 replies - 1 through 4 (of 4 total)
  • The topic ‘Fake user for all content’ is closed to new replies.