Page MenuHomePhabricator

Reset the password of user Hayk.arabaget
Closed, ResolvedPublic

Description

Hello. My friend has changed his password a few years ago and doesn't remember it now. Is there any way that he can reset it without email? I know that it would be easier to just open a new user account but he wants to keep all his edit history, watchlist and so on. I'm from hywiki (my username is ԱշոտՏՆՂ) and since it is a small community many active users know him personally and can guarantee that no one wants to steal that account (if I'm not enough). His username is Hayk.arabaget. I can provide his email if you need it.

Event Timeline

Restricted Application added a subscriber: Aklapper. · View Herald TranscriptFri, Nov 29, 10:25 AM

Hi,
I see request like this for first time. I think to this is possible via https://gerrit.wikimedia.org/r/plugins/gitiles/mediawiki/core/+/master/maintenance/changePassword.php maintenance script, but because of security reasons, user should send mail to ca[at]wikimedia.org from same mail which is in affected account, confirm own identity and add link to this task in mail..

But @jrbs may knows more, so I leaving this to him to reply.

Hi,
I see request like this for first time. I think to this is possible via https://gerrit.wikimedia.org/r/plugins/gitiles/mediawiki/core/+/master/maintenance/changePassword.php maintenance script, but because of security reasons, user should send mail to ca[at]wikimedia.org from same mail which is in affected account, confirm own identity and add link to this task in mail..
But @jrbs may knows more, so I leaving this to him to reply.

Thanks for your response, @Zoranzoki21. The problem is that there is no connected email (otherwise he could just use the Special:PasswordReset page). I understand that there are security risks but I have been editing Wikimedia wikis about five years. If you need I can ask other users with years of experience (who know Hayk.arabaget personally) to confirm that he is unable to use his account .

@Zoranzoki21: (Such requests are not uncommon. Also, subscribing individual people to tasks often does not scale - that's why we have project tags.)

From the list available at https://wikitech.wikimedia.org/wiki/Password_reset/Confirming_identities, we're left with trusting @Ashot1997's word. Given they're an admin with nearly 100k edits, I've no problem with trusting their vouch. Could you please tell us an email owned by the user? We can then assign the email to the account, and the user can then do a password reset through the ordinary form.

Thank you very much ^_^. His email is haykorient@yahoo.com

Mentioned in SAL (#wikimedia-operations) [2019-11-30T15:47:27Z] <Urbanecm> Reset email of SUL user Hayk.arabaget (T239462)

Urbanecm closed this task as Resolved.Sat, Nov 30, 3:47 PM
Urbanecm claimed this task.

Done

Restricted Application added a project: User-Urbanecm. · View Herald TranscriptSat, Nov 30, 3:47 PM
jrbs moved this task from Backlog to 2FA (requests) on the Trust-and-Safety board.Mon, Dec 2, 7:36 PM