Deleted Accounts
When attempting to sign into a deleted account through the web browser, I am required to enter my Email, Secret Key and Password (as normal). However, with a deleted account, I can enter the Email, Secret Key and ANY random password and it tells me "Can’t sign in. This account has been deleted.". Is this a security issue that any random password can be entered to get this message?
1Password Version: Not Provided
Extension Version: Not Provided
OS Version: Windows 11 23H2
Browser: Edge 120.0.2210.91
Comments
-
Your Secret Key would only be known to you. It's essentially acting like an additional verifier in this situation. A deleted account cannot be acted upon. It also does not indicate that another may exist or has been created using another address. I hope this helps.
0