Mojira Archive
WEB-3167

Changing your username accept any password as valid

Summary

Even though the profile name changing feature on minecraft.net asks for your password, it will accept any input.

Steps to reproduce

  1. Go to https://www.minecraft.net/en-us/profile and log in
  2. Enter a random unused username into the New Profile name box
  3. Enter the letter "a" into the Verify with password box
  4. Click CHANGE PROFILE NAME

Even though "a" is not your password, your profile name will still get changed regardless.

Fixed

Jasper Rebane

[Mojang] Web Team

2020-10-02, 01:30 PM

2020-12-04, 02:18 PM

2020-12-04, 02:18 PM

0

2