Did I get that unlucky and get assigned a bad IP?
Its mobile data btw.
And I don’t wanna point fingers and blame Proton, but like… c’mon,
First of all, its a real IP address,
Second, even if it were a VPN, so what, your company literally runs a VPN lol, kinda ironic.
And its also a paid account, and I rarely (almost never) send outgoing emails.
But again, this is just a small annoyance, I generated a new password in Keepass and its seems fixed.
Seriously surprised no one has said this yet, but overzealous companies sometimes flag mobile ISPs just for being mobile ISPs. I have T-Mobile as my home internet provider and I deal with this fairly often.
I take it as a sign of less than great security. Users on mobile ISPs tend to change IPs a lot, meaning implementing blocks like this is lazy and unhelpful. At best, they delay a bad actor until they flip a switch. At worst, they impede or completely block legitimate users such as yourself.
have T-Mobile as my home internet provider and I deal with this fairly often.
I have the same ISP and the same issue. I believe a lot of the issue is that T-Mobile uses CGNAT on their network. This means that your public IP is shared with a lot of other people and it means your “location” (based on your public IP) can jump around from time to time. I’ve had Netflix get bitchy about this before as my connection seemed to be coming from Maryland instead of Virginia and their records indicate that I’m not a terrible driver.
There’s a chance that malware is running on your device that is causing your IP address to get flagged
The alert seems to indicate a compromised account, this can mean a lot more than “a bad IP”. Your account may have shown up in a “dump” and they took action to ensure your safety. Have you tried putting your email address into HaveIBeenPwned. While the normal recommendation would be to not put your email address in a random web form, this site is actually run by a well known security researcher and just lets you know if you have shown up in such a dump in the past.
Another possibility would be that they have seen a major change in your IP geolocation in a short time. This is referred to as “improbable travel” and it’s something which many security departments take action on. If you login from an IP address which is associated with Paris, France and then an hour later are logging in from Dubai, UAE, this is going to be flagged. Sure, you might travel between those two locations, but you ain’t doing it in an hour. So, your account gets flagged as possibly compromised.
even if it were a VPN, so what, your company literally runs a VPN
Right, but they may not know that you are using another VPN. So, continuing the issue above of “improbably travel”. If you are on Proton’s VPN, they know all of their exit IP address and likely take them into account. But, if you are using a different company’s VPN, Proton likely doesn’t know all of that company’s exit IP addresses and so can’t account for them. Consider the situation from their perspective:
- You are using some other VPN and they force you to do a password reset.
- Outcome - you’re a bit annoyed, but ultimately your mail account is safe.
- Some attacker has your password and tried to use it to access your mailbox, but Proton stopped the login and forced a password reset.
- Outcome - you are a bit annoyed, but your mail account is safe.
- Some attacker has your password and tried to use it to access your mailbox, and Proton let them in.
- Outcome - You get wrecked and are really unhappy.
No matter what, Proton is going to lose out a bit to you being unhappy. However, if they force the password reset, the worst case is you being slightly annoyed about a password reset. By not taking action, they risk your account being fully compromised, which can be very, very bad for you. So, they are likely to be more proactive in forcing a password reset than you might like. This will be especially true if you do not have any sort of two-factor authentication setup. If the whole game is lost by one password being lost, any whiff of that password being compromised will result in a password reset.
Ultimately, it is am annoyance but one which is actually positive for you. They take your email security seriously enough that, when their system detected something, they took action to keep you safe.
- You are using some other VPN and they force you to do a password reset.
- Outcome - you’re a bit annoyed, but ultimately your mail account is safe.
Yeah, make sense, this is exactly what mildlyinfuriating is lol, not something that ruins your life, just a slight annoyance that might or might not be anyone’s fault, just unfortunate circumstances of the world (the unfortunate circumstance of the fact that fraudsters and hackers exist)
Ya, I just find that the mildly infuriating things can be less so by knowing why they are happening. As someone who regularly resets user passwords professionally (not for Proton), I figured I could give some insight into why this happens.
It’s a good sign, make the message reliably repeatable - remember how you did it. It’s your path out of being tracked.
I’ve had this happening more and more recently as the tracking has been tightened up.
Do you have two factor authentication set up? A lot of sites - Proton included - institute stricter security measures if you do not have 2FA enabled.
No 2fa, because the password is like 64 random characters stored in Keepass which itself is secured by a 10 word passphrase, 2fa seems redundant IMO.
Can’t Keepass also generate TOTPs?
Proton doesn’t know that your password is 64 characters long because the hash will be the same length regardless. They also don’t know if you’ve reused your password on other sites.
My tablet is running afoul of the Netflix “home” network lock. I speculate it’s either that I have location disabled or Apple Private Relay. Perhaps you have similar?
- Use mullvad.
- probably ur email got pwned –> use mullvad. That way the only reason your acc will ever be logged into is your own incompetence to secure a 16 char sequence.
