IMPORTANT: Update Your Minecraft Password ASAP

Posted on by

CHANGE YOUR MINECRAFT PASSWORD – WHY

A recent exploit found in OpenSSL (an open-source security socket layer, meant to secure/encrypt internet traffic) called “Heartbleed“, made it possible for hackers to find and use passwords on systems using OpenSSL.

WAIT, MOJANG WAS HACKED?

No, Mojang was not hacked. Their servers are not vulnerable to the OpenSSL exploit, but the load balancers they use from Amazon were. As a precaution, it has been recommended that you update your Minecraft password, just to be sure.

Mojang said:

Due to an exploit in the OpenSSL software used by Amazon’s load balancing serive (which we use for most of our stuff) we were forced to temporary suspend all of our services. All systems are now back online, and the exploit has been fixed. There was no way to target specific users, but we can not guarantee that your information wasn’t compromised. Therefore we recommend everyone to change their Mojang/Minecraft account passwords.

WAIT – DO I CHANGE MY MINECRAFT PASSWORD, MOJANG PASSWORD, OR BOTH?

If you have not migrated your account, change your password at Minecraft.net.
If you have migrated your account, change your password at Mojang.com.

Uncovery.me never used the affected versions of OpenSSL, so nothing to do here.

Regardless of whether you have or have not migrated, it is crucial to change your password.

11 thoughts on “IMPORTANT: Update Your Minecraft Password ASAP”

  2. from Yahoo News:

    “What should you do?

    – DELETED BY ADMIN –

    • Cousac, if Mojang ask people to change their password, then they HAVE updated their servers. It’s not really helpful to then post some quote from some news source you found in Yahoo that says otherwise. They do not know the Mojang servers and can hardly make a recommendation that overrules what mojang recommends themselves.

      While I heavily support open discussion on all topics, I cannot allow people to spread contradictory measures to a security threat. If you have technically supported reasons to believe people should not change their passwords, talk to me before contradicting my advice on the comments please.

  3. I still can’t get logged in to ANY multiplayer servers. Anyone else having this problem?

    Any ideas?

      • when I click multiplayer and go to the server list it says unable to connect to server.

        • OK, and if I try to log into one anyway it says “Failed to connect to the server. Outdated server! I’m still on {0}”

          • I just re reread what I typed. Its been a long day.

            Nevermind.

  6. thanks unc, i prolly never woulda found out about this if you hadnt said something ;)

Comments are closed.