At first users might be concerned that its a fake email from Twitch or that just their own account was hacked but no, its seems all users got this email. And worse still it maybe that sensitive information such as credit card numbers, and other personal information has been obtained.
Unauthorized Access to Twitch Accounts
We are writing to let you know that there may have been unauthorized access to some of your Twitch user account information, including possibly your Twitch username and associated email address, your password, the last IP address you logged in from, and any of the following if you provided it to us: first and last name, phone number, address, and date of birth. While we store passwords in a cryptographically protected form, we believe it’s possible that your password could have been captured in clear text by malicious code when you logged into our site on March 3rd.
For your protection, we have expired your password and stream keys. In addition, if you had connected your account to Twitter or YouTube, we have terminated this connection.
You will be prompted to create a new password the next time you attempt to log into your Twitch account. If applicable, you will also need to re-connect your account to Twitter and YouTube, and re-authenticate through Facebook, once you change your password. We also recommend that you change your password at any other website where you use the same or a similar password.
We apologize for this inconvenience.
The Twitch Team
You can tell its not fake as it doesn’t give you a link to click in the email, you have to go directly to the Twitch site and it will have logged you out and you don’t know your password as they removed it so the only step is to request a new password.
When you create your new password you will find that Twitch are making you be a bit more clever with your passwords, these were the instructions from the Twitch Blog about the unauthorized access to Twitch accounts.
How do I create a secure password?
In order to create a secure password, we suggest you use a long random character string with a mix of character types (letters, numbers, symbols). To make it easy to remember, feel free to use words from the dictionary with multiple uncommon string substitutions.
- Bad: Applesauce1! – You’re using different character types, but the majority of the password is a single word from the dictionary
- Okay: ILoveGreenApplesauce – You’re using multiple words and lots of characters, but the words are too common.
- Good: !70v3Gr33n@pple$auce? – You’re using multiple words and lots of characters with uncommon substitutions. Good job.
- Best: Use a reputable password manager with a random password generator.
These are great methods to use on any of your accounts, much hard for a hacker to hack. Its all about good security. See our Tips for changing your password too.
If you had any other accounts that had the same password you should change those too.
We are yet to hear exactly what happened or the extent of the hack or breach or whatever this Unauthorized Access to Twitch Accounts was but we will let you know when we find out more.