Password reset notification

Hello Andrew-

I’m sorry to hear about the unrequested password reset notifications you’re getting, we’ll be happy to help.

To clarify, are you receiving these notifications from BoldGrid.com, or your website? If you’re getting repeated password reset notifications from your website, it’s possible that your login form might be experiencing a brute-force attack.

There’s a couple of simple things you can do to prevent this type of attack. First, make sure that your administrator user isn’t using a generic username like “admin,” and make sure that the email address for the administrator user isn’t generic, especially if it’s using the same domain as your website. Email addresses like “info@yourdomain.com” or “admin@yourdomain.com” are easy to guess, and therefore susceptible to brute-force attacks.

You might also consider using a login protection system like Loginzier, which will let you use several ways to secure your login form, like Captcha, 2-Factor Authentication, and basic brute-force protection for incorrect password attempts.