You must update your Rogers email account settings

[57]

I got an e-mail on one of my e-mail accounts this morning. Interestingly I only got it on one of our accounts, not the other three accounts that my wife and I have.

At first I thought it was phishing, but it appears that people who use certain e-mail clients (like Outlook) will have to reconfigure those clients for a "new password" (app password).  Webmail  doesn't appear to require the change. 

The e-mail states:

Important: You must update your Rogers email account settings.
 
Protecting your data is as important to us as it is to you. Rogers is making several security upgrades and implementing a new authentication system to further protect you and your data.
 
Rogers requires you to update your email settings to continue using your email account.
 
It only takes a few minutes of your time to ensure you have uninterrupted access to your email.

There is a link as follows indicating the people who need to do this, as well as instructions on how to do it:

http://www.rogers.com/web/support/internet/email/442

Please excuse me if this is discussed elsewhere. I did try searching and didn't find a thread on this specific topic.

***EDITED LABELS***

[RichardF]

Something just hit me.

I made the changes.  I think.   Email access is OK.   

But how do I know it's all good, until the cut off date?   That would be a bad time to discover a problem.   Rogers HAS stopped sending me emails which ordinarily might be comforting, but with this crew can I be sure?

[mrbrimi]

Third and final notice? How wonderful! I'm the account holder and I've yet to get my first notice. Bet I'm not the only one. Way to go Rogers!

[User14]

I think all this is related to the Yahoo Security breach announced back in Dec 2016. 

I received this "update" on 10 Oct 2017.  Considering the data was stolen in Aug 2013, you have to wonder who is at the helm and what does "security of our users remains a top priority" really mean. 

Changing your passwords more frequently may be the best solution!  

UPDATED NOTICE OF DATA BREACH

Dear Yahoo User,

We are writing to update you about a data security issue Yahoo previously announced in December 2016. Yahoo already took certain actions in 2016, described below, to help secure your account in connection with this issue. What Happened? On December 14, 2016, Yahoo announced that, based on its analysis of data files provided by law enforcement, the company believed that an unauthorized party stole data associated with certain user accounts in August 2013. Yahoo notified the users it had identified at that time as potentially affected. We recently obtained additional information and, after analyzing it with the assistance of outside forensic experts, we have determined that your user account information also was likely affected. What Information Was Involved? The stolen user account information may have included names, email addresses, telephone numbers, dates of birth, hashed passwords (using MD5) and, in some cases, encrypted or unencrypted security questions and answers. Not all of these data elements may have been present for your account. The investigation indicates that the information that was stolen did not include passwords in clear text, payment card data, or bank account information. Payment card data and bank account information are not stored in the system we believe was affected. What We Are Doing In connection with the December 2016 announcement, Yahoo took action to protect users (including you) beyond those identified at that time as potentially affected. Specifically: Yahoo required potentially affected users to change their passwords. Yahoo also required all other users who had not changed their passwords since the time of the theft to do so. Yahoo invalidated unencrypted security questions and answers so they cannot be used to access an account. We are closely coordinating with law enforcement on this matter, and continue to enhance our systems that detect and prevent unauthorized access to user accounts. What You Can Do While Yahoo already has taken action to help secure your account, we encourage you to consider the following account security recommendations: Change your passwords and security questions and answers for any other accounts on which you used the same or similar information used for your Yahoo account. Review your accounts for suspicious activity. Be cautious of any unsolicited communications that ask for your personal information or refer you to a web page asking for personal information. Avoid clicking on links or downloading attachments from suspicious emails. Additionally, please consider using Yahoo Account Key, a simple authentication tool that eliminates the need to use a password on Yahoo altogether. For More Information For more information about this issue and our security resources, please visit the Yahoo 2013 Account Security Update FAQs page available athttps://help.yahoo.com/kb/index?locale=en_CA&page=content&y=PROD_ACCT&id=SLN28451&actp=productlink. We value the trust our users place in us, and the security of our users remains a top priority. Sincerely, Chris Nims Chief Information Security Officer

[User1750246]

 Yahoo webmail login changes

I login to my Rogers email account through the yahoo portal. But in the past few logins, I get re-directed to a "rogers" page and I have to put my password to continue to my webmail.

Is this something Rogers has implemented? If so, where is the communication to this effect? With phising sites, malware and trojans, one has to be cautious.

Also, can I switch it off? Passwords are like keys. The less copies out there, the less chances of break-in. Don't need to keep passwording here there ad everywhere.

k

[BS]

@User1750246

I don't actually use my rogers yahoo email anymore dumped its use over a year ago when the security breach was announced by Yahoo.

So I moved everything to Gmail and I keep the Yahoo Rogers active, but it is all forwarded, so I never look at it.

I just did check it based upon your post, and I found the same.

You log into Yahoo.com, and I go to log in, you get the Yahoo interface, enter the xxxx@rogers.com and next, then it takes me to the rogersmembercentre.com (A new and easy way to access your Rogers Yahoo email account. Please login with your @rogers.com or @nl.rogers.com email address and password.)

New yes, easy way to access - not really, typing yahoo.com, enter your user name (email address and password couldn't be easier), but no you have one of two choices, go forward with a second step now forced through the redirection to the rogersmember centre (I suspect this is a yahoo redirect as Rogers has implemented the Yahoo security changes in a slightly different way than Yahoo did, and used their own management interface called rogersmembercentre.com)

The alternative, is bookmark this new page, so that you don't have to enter the long url and remember that it is Canadian spelling, not US.  Surprised Google got that one right. (;

But what you see happening is the same as I experienced - have to learn not to just do as we used to "yahoo.com", so we can get back to the same yahoo website and mail access you see when you type Yahoo.com

So for Rogers yahoo and mail access is no longer a seemless process anymore.

Once more outcome of the change over in security.

I still hold by the opinion - get everyone to use a new email you create, say like Google, and leave Rogers yahoo email to wither and die the death it deserves.  Nobody needs the incentive of 9 email addresses from Rogers ISP anymore when there are so many other free services, and you don't have the hassle of notifying everyone to change your email if you decide to change ISP's.  It really is not a good idea anymore to tie your email to any ISP as it makes changing companies a challenge.

Thanks for raising the question - hadn't seen that one before - one more in the saga of this whole Yahoo breach and move to "improve security".

Bruce

[User1750246]

I agree with most of the points there, Bruce. I came to realize that as well. Except I have almost 14 yrs of important (legal and tax related) emails stored in my account. Question is, does Gmail (or any other providers) download the entire history ?

[evsteinberg]

Do you know if you can have more than one Google account. I would love to drop Rogers. I have a gmail and a a .mac account as well.

BTW I know people who say they never received notice about the change from Rogers. Is that possible?

[JKnott]

---

@evsteinberg wrote:

BTW I know people who say they never received notice about the change from Rogers. Is that possible?

---

I haven't received any notification about this.

[Dugi]

---

@User1750246 wrote:

 Yahoo webmail login changes

I login to my Rogers email account through the yahoo portal. But in the past few logins, I get re-directed to a "rogers" page and I have to put my password to continue to my webmail.

Is this something Rogers has implemented? If so, where is the communication to this effect? With phising sites, malware and trojans, one has to be cautious.

Also, can I switch it off? Passwords are like keys. The less copies out there, the less chances of break-in. Don't need to keep passwording here there ad everywhere.

k

---

I am experiencing the same thing. As far as I am concerned, rogers is hijacking my page. It is really annoying because as Bruce mentioned, the process of signing into your email is no longer seamless. Sometimes it does not even work as I am forced to watch the rogers jumping beans while waiting to log in. Please rogers, restore the previous functionality and stop hijacking our pages. The member centre page for logging in simply does not cut it!

[RichardF]

I think that's more of s client issue than email provider. Outlook for example can keep mail on your hard drive and you can create archives.

[57]

Today I noticed the same thing as others discussed above recently regarding Webmail. I had previously bookmarked my sign-in page and could login to Rogers Webmail from there. Today, an extra click was required, taking me to a Rogers page where I had to enter the Webmail password instead.

Previously, my plan was to wait until November 2nd to see what happened, but after this recent development, I thought I'd better get my App Password(s) now in case things went south on November 2nd for me. If that were to happen, I'm sure it would be difficult to get a competent Rogers CSR for assistance...

I utilized the instructions previously provided and got the App Passwords for two of my four e-mail accounts.  The procedure was seamless and my Outlook client works just as before.  I tested sending from one e-mail address to another.  I'll leave it like this for a day or so and then do my remaining e-mail addresses. (I have four because I have a personal one, a "business" one, one for my wife and one "disposable" for web activity.)

I'm sure many people have already made the change to App Password(s), however, there are probably many others who have not done so. I wish them luck in early November.  Of course this only impacts the applicable e-mail clients, like older Outlook, and you should always be able to utilize Webmail.

For accessing Webmail I have created new bookmarks specific for the two e-mail addresses I have changed and will create another two in a day or two...  Previously I only required one bookmark as all of my e-mail addresses were listed there...

[User1750246]

I know an email client can do it, but I was hoping to find a webmail service that downloaded the historical folders. Anybody know any webmail services that does that??

[BS]

@User1750246

In my experience, I had no issues with porting all the folders and past email to my gmail account and I pulled over close to 10,000 emails and did it on three accounts of my own and two of my wife's.

And for the question also raised - can you have more than one Gmail account - no limit, in fact it provides for more free google drive storage that way too.

You choose a primary account for your Google accounts if you are working from an Android device, and that account manages your phone google play and other google services, and you just add each of your additional emails.  You can view them seperately or have them all available in your email service.  My wife currently manages 4 email accounts on gmail in one application as she has one personal account on Gmail, and 3 related to different businesses she runs.

Here is a link for porting your mail.  Do not delete your yahoo mail messages until you know you got tham all.

https://www.lifewire.com/import-your-yahoo-mail-messages-and-contacts-into-gmail-1172011

You will end up with new folders in your gmail account with your yahoo address as a top level folder, and each folder under that top level folder.

[BS]

@evsteinberg  Yes, you can have as many gmail accounts as you want and you can manage them within whatever client or online method you wish to use.

See my reply to @User1750246 in reference to porting your old mail, I comment there too on ability to have multiple gmail accounts.

Bruce

[SheamusPatt]

Oddly enough, while I have long had a @rogers.com e-mail address, I can log in to the Yahoo portal (I assume you mean https://mail.yahoo.com) and don't find myself being redirected anywhere. It looks pretty much the same as it did a month or two ago. I also tried going to http://mail.rogers.com and was still redirected to mail.yahoo.com. It's all working (I sent myself a new e-mail just to make sure it was picking up new mail). 

Seems strange that only some Rogers e-mail users are being  redirected to their new member centre.

[57]

@SheamusPatt:

If I use your first link, I get to the Yahoo "portal", however, as soon as I click on one of my e-mail addresses, I'm sent to a Rogers log-in to put in my Webmail password.

---

A new and easy way to access your Rogers Yahoo email account. Please login with your @rogers.com or @nl.rogers.com email address and password.

---

If I use your second link, I'm sent to the Rogers log-in right away and need to enter my e-mail address and password.  As I mentioned in my previous post, I have now "bookmarked" this link, which contains my e-mail address in the URL, so I only need to enter the Webmail password.

I suspect the Rogers/Yahoo website "knows" if you have accessed your e-mail via a client like "older" Outlook without OAuth and then you are redirected...

[BS]

@57  Sounds like a reasonable guess (yours is as good as anyone's on this), but I don't use an email client on the yahoo email - in fact, I don't access it period, except to test when someone mentions something odd.

Any remaining email that ends up at my rogers yahoo account is immediately forwarded to my gmail account.  Although I did do so testing on old clients, so maybe you are right, maybe it has a record of us doing that.

I am reaching the point where my safest answer is: don't know why it works this way for you and not for others. 

It still remains to be seen what Verizon intends to do in the long run with Oath (the new brand name for the combined Yahoo and AOL).  They forced all verizon.net mail addresses into AOL accounts.

So the saga continues, again, why I moved everything.  But I will keep testing and supporting as much as I can on this one until it reaches some kind of conclusion.

Good luck all and keep bringing issues forward as this "migration" of security and merger of companies works itself out.

Bruce

[SheamusPatt]

I see your issue now. One test I hadn't done was to actually "Sign Out". Seems I was just connecting with saved credentials - if I do sign out, then I'm popped into the Rogers Member Centre stuff,.

I agree, very annoying, and just the opposite of "A new and easy way to access your Rogers Yahoo email account. " as they claim. Well, maybe it is new, but it's not easier.

[User14]

---

@User1750246 wrote:

 Yahoo webmail login changes

Is this something Rogers has implemented? If so, where is the communication to this effect? With phising sites, malware and trojans, one has to be cautious.

k

---

Good point about being repeatedly asked for your password. People should not get complacent. Last week it was reported that iPhone’s habit of repeatedly requesting your Apple ID password with little or no explanation is also a security flaw. Attackers can craft extremely convincing phishing attacks to get people to just put in their password without realizing what they are doing. You can get sucked in by being redirected. 

[Dugi]

---

@SheamusPatt wrote:

I see your issue now. One test I hadn't done was to actually "Sign Out". Seems I was just connecting with saved credentials - if I do sign out, then I'm popped into the Rogers Member Centre stuff,.

I agree, very annoying, and just the opposite of "A new and easy way to access your Rogers Yahoo email account. " as they claim. Well, maybe it is new, but it's not easier.

---

You are correct. It is not easier at all. What I have also found is that once I sign out, even though I checked "remember me" using the rogers member centre to sign in, that once I close the browser, I have had major issues. Upon loading the browser again and clicking on my Webmail, I am subjected to the famous rogers jumping beans. The page does not load. No matter what I click on, nothing worked. The only way I was able to get back in was to clear my cookies, as that ensures you are now signed out. It used to be that when using the yahoo log-in, it would could keep you signed in for 2 weeks. The only way I can be assured of getting back in now is to log out of my rogers account every time I close my browser (using Chrome). Simply put, the new redirects to the members centre are a total pain. Rogers needs to make this a whole lot easier. 

[User14]

---

@User1750246 wrote:
I know an email client can do it, but I was hoping to find a webmail service that downloaded the historical folders. Anybody know any webmail services that does that??

---

We are off topic, but I have been using Office Outlook for about 19 years and have managed to save all my sent and received emails plus attachments in an archived *.pst file for each year.  If you are interested in this approach let me know and I'll PM more info.