# Hack/break-in: New login from

**URL:** <https://meta.discourse.org/t/hack-break-in-new-login-from/176286>\
**Category:** Product Support\
**Created:** [January 16, 2021, 3:00pm UTC](https://meta.discourse.org/t/hack-break-in-new-login-from/176286 "2021-01-16T15:00:33Z")\
**Posts on this page:** 1\
**Showing post:** 7

<div class="post-metadata">

**Author:** ![Falco](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/falco/32/179432_2.png) [@Falco](https://meta.discourse.org/u/Falco)\
**Post date:** [January 17, 2021, 1:57am UTC](https://meta.discourse.org/t/hack-break-in-new-login-from/176286/7 "2021-01-17T01:57:44Z")

</div>

Great to hear 3 of our protections were useful:

- Invader couldn’t get backups because of the needed email flow

- Invader couldn’t get admin on a email that he controls because there is emails to confirm to both addresses

- Warning emails when login happens from far away

One thing that you should check is if Discourse is running the most recent version so it’s patched against any know vulnerabilities.

---

_[View the full topic](https://meta.discourse.org/t/hack-break-in-new-login-from/176286)._