Bug report: gamertag can be change without asking for password or pin if it's free

SébastienTardif · Jan 4, 2022

This is a bug report on gamertag change without authorization.

My first years old changed my 10+ year single word gamertag, without knowing my password or pin, and with limited reading capability. I was also not notified by email. It seems the change is irreversible and cost $10 to change it back to something. I don't see why this is not protected better. What's the check done if my 5 years old try to buy a $5 game, or try to change the gamertag again? I think there are some security check in place, they should also apply on deleting a gamertag.

:)

Jesse E'

Hello, My name is Jesse. I'm an Independent Advisor and a member of the Microsoft community and I'd love to assist you today.

I'll suggest you report this as a feedback to the Xbox insiders subreddit. If this gets enough up votes, it will be considered as something people want and a change will be more likely in the works.

You can leave the feedback here feedback.xbox.com

FernandoCarvalhoPV

My name is Fernando I'm an independent consultant, I'm happy to help

To change your sign-in preferences, such as requiring a password when signing in, follow the steps below.
Press the Xbox  button to open the dashboard.
Select Profile & System > Settings.
Under Account, select Sign in, security & PIN.
Select Change my sign-in and security preferences.
Choose one of the following options:
Do it fast, as if by magic: automatic entry, no need for a password or PIN.
Barrier-free: No password or PIN required to sign in, change settings, or make purchases.
Verify it's me: A PIN is required to sign in.
Ask for my PIN: A PIN is required to sign in, change settings, or make purchases.
Lock: Your Microsoft account password is required for almost everything.
Customize: Select this option to customize which actions require a password or PIN.

Hope I helped and see you soon

William_Howes

So why wasnt this process behind pin access. She plays minecraft and her add on packs only work under my gt. She was 3 when she started playing minecraft. Its the only game she has to play on my gt. Same xbox under her gt she cant access them.

JosefLBohorquez

Hi and thanks for reaching Microsoft Xbox gamer's community. My name is Josef.
I'm an Independent Advisor and a Microsoft Xbox user like you.

Hope you're doing great today despite this William

Sorry to hear that your gamertag has been changed without your permission.
I don't like to give bad news but once the gamertag is changed is not possible to revert or undo this process.

Exists the possibility that your daughter did this change in the middle of a gaming session
And if you wasn't charged probably she used the free change.

William_Howes

Everything , even edge is behind a pin. Evidently changing a gamertag is not. I still can go through the whole process including paying for it without ever having to put my pin in. Even though transactions specifically are behind the pin.

Bug report: gamertag can be change without asking for password or pin if it's free