# Dealing with a hacked user account should not require the console

**URL:** https://meta.discourse.org/t/dealing-with-a-hacked-user-account-should-not-require-the-console/398627
**Category:** Self-hosting
**Created:** [17 במרץ,‏ 2026,‏ 11:50am UTC](https://meta.discourse.org/t/dealing-with-a-hacked-user-account-should-not-require-the-console/398627 "2026-03-17T11:50:06Z")
**Posts on this page:** 1
**Showing post:** 12

<div class="post-metadata">

### Author: ![nathank](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/nathank/32/290039_2.png) [@nathank](https://meta.discourse.org/u/nathank)
#### Post date: [18 במרץ,‏ 2026,‏ 6:58pm UTC](https://meta.discourse.org/t/dealing-with-a-hacked-user-account-should-not-require-the-console/398627/12 "2026-03-18T18:58:01Z")

</div>

I recently put in a feature request for more control over user email addresses for admins, which would address this use-case as well:

> [@Make it possible to activate a changed email address in the Admin UI](https://meta.discourse.org/t/make-it-possible-to-activate-a-changed-email-address-in-the-admin-ui/396760):
>
> It is not currently possible for an admin to change a user’s email address unilaterally without diving into the console. I find that I need to do this fairly often: It isn’t just for staff emails. I find that email clients (especially Outlook) manage to successfully de-emphasise the confirmation email so much that users are quite unlikely to confirm their new email address. This is a particular problem as people move between organisations (and thus email addresses) - this seems to happen qui…

> [@itsbhanusharma](#):
>
> This is not something people should have to deal with on a daily basis and if situation is critical enough, administrators know their way around mitigation.

Yes, not a common event (fortunately). But critical when it (or something similar) occurs, and requires a fast response. Not the time to be learning how to navigate Bash / the rails console or raising a support ticket!

---

_[View the full topic](https://meta.discourse.org/t/dealing-with-a-hacked-user-account-should-not-require-the-console/398627)._