We're calling on all EU-based Mozillians with iOS or iPadOS devices to help us monitor Apple’s new browser choice screens. Join the effort to hold Big Tech to account!

Avatar for Username

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

This thread was archived. Please ask a new question if you need help.

security gap, second email

Andy
Andy
more options

I think I found an error using which I can pass through a user account. You have entered the options for entering a second email in your settings. Now you can enter the second e-mail without confirming the password. Then you can set it as the main e-mail. Then you can change the password with the help of the newly entered e-mail!

This way you can change your account in a few seconds :(

Regards andy

I think I found an error using which I can pass through a user account. You have entered the options for entering a second email in your settings. Now you can enter the second e-mail without confirming the password. Then you can set it as the main e-mail. Then you can change the password with the help of the newly entered e-mail! This way you can change your account in a few seconds :( Regards andy

All Replies (1)

Vlad Filippov
Vlad Filippov
more options

Andy said

Now you can enter the second e-mail without confirming the password.

Before you can set a Secondary Email we require a verified session. See attached screenshot: "NOTE: Before you can view or make changes to this section, you will need to verify your email address.".

If you have a "verified" session, that means you verified your email in that session and that will allow you to add a secondary email. Otherwise you won't be able to do so.