You must update your Rogers email account settings

[57]

I got an e-mail on one of my e-mail accounts this morning. Interestingly I only got it on one of our accounts, not the other three accounts that my wife and I have.

At first I thought it was phishing, but it appears that people who use certain e-mail clients (like Outlook) will have to reconfigure those clients for a "new password" (app password).  Webmail  doesn't appear to require the change. 

The e-mail states:

Important: You must update your Rogers email account settings.
 
Protecting your data is as important to us as it is to you. Rogers is making several security upgrades and implementing a new authentication system to further protect you and your data.
 
Rogers requires you to update your email settings to continue using your email account.
 
It only takes a few minutes of your time to ensure you have uninterrupted access to your email.

There is a link as follows indicating the people who need to do this, as well as instructions on how to do it:

http://www.rogers.com/web/support/internet/email/442

Please excuse me if this is discussed elsewhere. I did try searching and didn't find a thread on this specific topic.

***EDITED LABELS***

[Robert241]

I have updated my email account settings on my desktop computer. Is it necessary to repeat this process on my laptop or can I just paste the password generated for desktop into the server of the laptop.

[sgardner2088]

So, what are the changes you expect for using Mozilla Thunderbird? I have already been using my full email address as the username and SSL security. Do I need to change the pop server address and/or port?

[timlocke]

I went to Mozilla support and read the how-to on changing from POP to IMAP in Thunderbird. A non trivial process as one has to invent a new email address and then manually transfer all the messages across. 

[davehooper]

@timlocke: You are correct. It is not a trivial exercise. You either have to take out a new email address or you need to know how to save a TB Profile and copy parts of it (using Windows File Manager) after creating the IMAP type account if you want to keep your Inbox and Sent folder contents.

IMAP works in much the same way as webmail or Windows Mail type clients. You are effectively looking through a window to your account on the remote email server. You don't get your emails (Inbox, Sent) retained on your computer's hard drive.

POP on the other hand download and keeps all your Inbox emails and Sent emails on your computers hard drive. When you tell TB to delete an email from your Inbox that same email will be deleted on the email server.

IMAP works best when you (a single individual) accesses their emails using more than one device (ie: a computer plus a smartphone).  Or if you don't want to keep a copy of your Inbox emails on your hard drive.

[JKnott]

The easiest thing to do is just create an IMAP account, but leave the POP account in place.  Then disable automatic downloads with the POP account.  You can also configure it to save the sent messages in the IMAP account, so all newly sent messages are put there.  You can then, at your leisure, move messages from folders in the POP account to the IMAP account.  Once everything has been moved, you can delete the POP account.

Also, you can configure Thunderbird to download copies of messages, so you'll always have them on the computer.  However, you probably don't want to do that with a cell phone or tablet.

[JKnott]

On e thing I've noticed is OAuth2, with Thunderbird, appears flakey.  Sometimes it works and other times it doesn't.  OAuth2 with GMail is solid.

I wonder how it is directly on Yahoo, rather than through Rogers.

[RichardF]

Hmmm ... Id say the process does work for Outlook 2013 but ... its a bit intricate and you have to be very careful.

I was using as a test an old account, which actually needed to be set up in Outlook first.  I did that (IMAP), very carefully as I thought, put in the App password and then got two unexpected pop-ups: one for invalid security cerificate name, which I ignored, and the a second from *Windows Security* (not the Outlook password box) asking for password; neither the App password nor the account password worked.

Deleting the App password in member centre, and retracing steps, it worked the second time.

I can only conclude that I must have made some incorrect entry somewhere the first time, in spite of being ultra-careful.   I wonder how many others are making similar slips.

[phyljohn]

For Thunderbird users on a Mac. with POP and SMTP.

Procedure to change your Rogers Yahoo email password.

1. Follow the Rogers procedure to get your new password.
2. Copy that password to a place on your computer where it can be easily retrieved, e.g. a Stickies note.
3. Start Thunderbird
4. Go to: Preferences>Security>Passwords
5. Click button: Saved Passwords...
6. (A Saved Logins window opens containing sites beginning "mailbox://..." and "smtp://..." along with your user name for the account.)
7. Click button lower-right corner: Show Passwords and then Yes to confirm choice.
8. (Now you will see your existing POP and SMTP passwords along with any other stored passwords)
9. Copy the new Rogers password from temporary storage to the clipboard.
10. Double-click the existing password in the Saved Logins dialogue and paste the new Rogers password for both POP and SMTP entries, in turn, to replace the existing POP and SMTP passwords in Saved Logins.
11. Close Preferences
12. Test both SMTP (sending) and POP (receiving) with the new passwords by sending yourself a message.
13. Delete the password from your temporary storage.

P.S.: Stupidly, on the part of Rogers, you will continue to get email or automated telephone messages from Rogers urging you to update your email password. Ignore these.

P.P.S.: It's a good idea to use a password manager for your passwords

[Avid-]

As if there hasn't been more than enough on this, can someone please indicate why I received this notice from Rogers on only one of five @rogers.com email addresses?  Will the remaining four addresses need to be updated as well?

For the record, the one update I have completed worked when the instructions provided were completed for Outlook 2010 and Windows 10 email clients.

Thanks

Avid

[RichardF]

Any wonder people don't change passwords frequently?

[stoneball]

>>For the last week i have been getting a superimposed/redirect/popup (unsure what it actually is) message from rogers when i open up tabs or links. The message usually is quick but is crashing the page and giving me "The connection was reset" page, but loads the page once i use the reload button. It is happening when i open multiply tabs and when i'm trying single tabs aswell. On the message it does not have a button i can press or box to tick to not continue recieveing the email message as ive already reset the account passwords. I opened a ticket with rogers but recieved an email this morning saying they can't find the issue (yet its been brought up on the longer email password change thread) so it is an issue. very annoying can someone help ?

me too, whats going on w rogers popping up on my browser?? Not only is it popping up but a whole range of addresses are basically unreachable because of this popup/crash. So rogers has hijacked my 2 browsers???? chrome/firefox???? Where is the rogers presence on this forum telling us what is going on???

[21Rouge]

This is my first post to this thread.

Here is what happens in our house regarding our single rogers email account:

1. I rarely, but I guess sometimes, access our single rogers email account by logging into the rogers web mail.
2. But much more often we have it set up to use...Gmail as a client (I think that is what it is called) so that all the emails for the single Roger account get "forwarded" to our designated primary gmail account ie pop.mail.yahoo.com.

I see this on my phone (gmail account) and on our computer and tablet.

Of course we wish to preserve this 'arrangement'. Will the "update to our Rogers email account" necessarily alter this?

Thanks for your experiene.

[Gdkitty]

I believe it would, yes.

In that case, gmail is acting as a 'email client', collecting the email... i am guessing via PoP??

You would have to go through the steps, to allow gmail to collect from it properly.

[BS]

Yes, Gmail should be fine - it has OAuth baked in already and as long as you use the Yahoo set up setting when you did it, not other (manually setting things up), it should be fine.

Worst is that you redo it

My understanding is that Yahoo does not received forward email from other accounts via POP anymore, but as for your receiving email from Yahoo to gmail client, it will be either POP or IMAP which ever you chose.

After this whole thread, I feel like I know more about email than I ever wanted to know.

As for the pop-ups over the browser, I agree. I haven't had one yet, but it is driving my wife nuts, and the crazy part, I agree, is let us turn it off - let us decide to take the risk - we have nothing to change in our case, so go away.

If we are seeing this much on the forum, wonder how much support calls are happening, because a lot of this is clear as mud and they certainly haven't thought through all the ways that we use email.

I do hope it goes relatively seemlessly when Rogers finally activates it, and we can go on with life.

Bruce

Bruce

[Buckoo]

Well, if it is any help to anyone who uses eMClient, all you need to do is copy paste the app password into the password field once your outgoing email is rejected, which happened to me today, and you get a popup notice that your password was rejected.  Really not much of anything to do at all. 

[SheamusPatt]

I've received several notices about Rogers' upcoming implementation of app passwords for email. It's a pain but I understand the notification. 

I'm afraid that injecting the notice into otherwise legitimate web pages I'm visiting goes over the top for me, though. I buy a service that I expect will give me unimpeded access to the internet. When my provider starts injecting their own content into web pages I might be viewing, that's clear evidence that they are monitoring and actually modifying the content I'm seeing.

Here's an example captured this morning.

Rogers, please stop. No one should be monitoring my surfing.

[kkowalski]

Security Changes to your Rogers Yahoo! Email

Thank goodness I can finally reach the online Rogers/Yahoo account.

However the Windows Live Mail client ( comes with Windows 10) which was working, stopped working the minute I generated the app password, in spite of following the instructions exactly as described. The message that appears states that "Live Mail could not log on to the email server using secure password authentication."

The settings in the Live Mail accounts tab is not complicated and yes I tried generating a new app password, but clearly something is not working.

Does someone have a solution?

[Gdkitty]

Injecting, doesnt mean they are monitoring, so to speak.

Not necessarily monitoring the CONTENT.  But moreso that they know of what each type of packet is that is going through, etc.  (an HTTP request, an FTP, etc)

The injection is that they just tag it onto an HTTP request reply.  Not that they know what the content is of that reply.

[57]

I also got one of the "injected" notices when surfing the web, however, there is an "acknowledge" link in the notice, which may preclude further injections after you click it...  I have not seen the injection after acknowledging, but it's only been a couple of days...

[SheamusPatt]

You're right that this is not evidence that they are keeping any of the content that I'm viewing, or that anyone is actually watching it; presumably, this is all being done by some bots that decide when I should be shown their update your settings notice. It is pretty clear, though, that their software must be inspecting the traffic being returned to me, as it's not being prepended to all of my http traffic meaning it's making a context based decision somewhere.

The point is I'm paying for access to the internet, and Rogers should not be mucking about with it. 

[21Rouge]

---

@BS wrote:

Yes, Gmail should be fine - it has OAuth baked in already and as long as you use the Yahoo set up setting when you did it, not other (manually setting things up), it should be fine.

Worst is that you redo it

My understanding is that Yahoo does not received forward email from other accounts via POP anymore, but as for your receiving email from Yahoo to gmail client, it will be either POP or IMAP which ever you chose.

After this whole thread, I feel like I know more about email than I ever wanted to know.

---

Thanks for your post Bruce. 

I called the Rogers "hotline" yesterday. The rep was polite and friendly but didnt appear to be expert in such matters. That is he thought all should be good (ie I needed no changes) BUT if at some point I was locked out of my account then it would not be difficult to get back in!