Auth0 Blocked Account

Overview

If you’re seeing a message from Auth0 stating that your account has been blocked due to a leaked password, don’t worry—we’re here to help you resolve this quickly and securely. This block occurs when our security system detects that the password you’re using has been exposed in a known data breach, putting your account at risk. To regain access and protect your account, you’ll need to take a few important steps.

Why Was My Account Blocked?

Auth0, our authentication provider, continuously monitors for compromised credentials. If your password matches one found in a leaked database (even from an unrelated service), Auth0 blocks access to prevent unauthorized use. This is a proactive measure to keep your account and data safe.

Steps to Resolve the Issue

1. Reset Your Password

Follow the Prompt: When blocked, you’ll see a message from Auth0 with a link or instructions to reset your password. Click the link or visit http://my.electric.ai and select “Set or reset password”
Create a Strong, Unique Password: Choose a new password that is at least 12 characters long, includes a mix of letters (upper and lower case), numbers, and special characters, and is not reused from any other account.

2. Update Your Password Everywhere It’s Used

Why This Matters: If your leaked password was used on multiple sites or services (e.g., email, banking, social media), those accounts are also at risk. Hackers often try leaked passwords across various platforms.
What to Do: Identify every account where you used the same password and update it immediately. Check your email accounts first, as they’re often a gateway to other services.

3. Verify Your Identity (If Required)

Depending on your account settings, you may need to complete a multi-factor authentication (MFA) step or answer security questions during the reset process. Follow the on-screen instructions to proceed.

4. Regain Access

Once your password is updated, log back into http://my.electric.ai with your new credentials. If you encounter issues, contact our support team at product-support@electric.ai.

Best Practices: Prevent This in the Future

To avoid being blocked again and to enhance your overall security, we strongly recommend adopting these habits:

Use a Password Manager

Recommendation: Tools like Keeper (or alternatives such as LastPass, 1Password, or Bitwarden) make it easy to generate, store, and manage unique passwords for every account.
Why It Helps: A password manager eliminates the need to remember dozens of passwords, ensuring you never reuse a password across sites. It also creates strong, random passwords that are harder to crack.
How to Start: Download Keeper from Keeper’s official site, set up a master password (make it strong and memorable), and let it generate unique passwords for all your accounts.

Use Unique Passwords for Every Account

Requirement: Reusing passwords across multiple services is a major security risk. If one account is compromised, all others using the same password become vulnerable.
Best Practice: Ensure every account—whether for the Electric IT Hub, your email, or other services—has its own distinct password.

Enable Multi-Factor Authentication (MFA)

Add an extra layer of security by enabling MFA in application settings. This requires a second form of verification (e.g., a code sent to your phone) in addition to your password.

FAQs

How Did Auth0 Know My Password Was Leaked?

Auth0 cross-references passwords against databases of credentials exposed in public breaches. These leaks often come from third-party services unrelated to [SaaS app name].

What If I Don’t Update My Password Elsewhere?

Failing to change your password on other services where it was reused could allow attackers to access those accounts, potentially leading to identity theft, financial loss, or further breaches.

Can’t I Just Reuse a Slightly Modified Password?

No. Small changes (e.g., adding “1” to the end) are easily guessed by attackers. Always create a completely new, unique password for each account.

Need Help?

If you’re unsure about any of these steps or need assistance resetting your password, reach out to our support team at product-support@electric.ai for more resources.