Xbox One passkey 100% Bypassable!

HiddenGinja · Jun 14, 2016

So I spoke to customer support and was told to put it here.

The Xbox one Passkey is not going to protect anything if a hacker gets hold of your account password. The passkey is good for those who don't know your password, but 9/10 if your account gets breached its by someone who illegally acquired your password.

So how does it work? Well, if a hacker gets hold of your password, they can then download your profile. But then they have to know your passkey right?

Wrong... If you enter your passkey wrong multiple times, it simply asks for your password. Which, the hacker already knew, because they have downloaded your account.

I thought this would be important to bring to light as its a false sense of security and as someone who has had their account stolen before, more security measures need to be put in place.

My suggestion is this, if the passkey is entered wrong too many times, simply send out a security code to the account holders phone, just like the chat support do.

This ensures that the account holder knows their account has been breached as they would know whether they have entered it wrong too many times or not.

Just a thought.

:)

Tweaked Donkey · Jun 14, 2016

Getting your profile off other peoples xbox ones

Unfortunately, I have not found an answer to this but I recommend creating a passkey to your account so only people with the passkey can have access to your account. Please refer to this website to learn how to create a passkey:

support.xbox.com/.../create-xbox-one-passkey

munkyxtc · Jun 14, 2016

passkey on Xbox One Windows 10

@sdorsey3,

As long as you know your Microsoft account password you can reset your passkey by following these instructions:

support.xbox.com/.../forgot-xbox-one-passkey

Qwertei · Jun 14, 2016

They would need your Email and password you are correct but if you setup two step verification it makes your account securer the name gives you what it does you need a different email or you can add a phone as soon as you enter your main password you will
be prompt to receive a security code via text, call, email.

If you wish to setup two step verification click
Here'

Qwertei

They would need your Email and password you are correct but if you setup two step verification it makes your account securer the name gives you what it does you need a different email or you can add a phone as soon as you enter your main password you will
be prompt to receive a security code via text, call, email.

If you wish to setup two step verification click
Here'

RandyAU93

Passkeys are a good quick way to log in, but there is one minor flaw, which falls back to my previous statement. If the user fails to enter the passkey three times, it reverts to asking for the account's password. If someone still knows that (such as might
happen when someone abuses the Home Xbox feature - "game sharing"), they can bypass the key and still make the purchase.

Has the item purchase appeared on your account's order history on the
account site?

XBF Esteban R

Hey there Steve!

Sorry to hear that you're dealing with this issue.

Well, in the case of him keeping all the progress that he already has earned in your profile, what was previously posted is 100% true.

We do have this thing you can set up to hopefully prevent him from logging in and using your profile instead of his. It's called a "passkey" and it's basically a PIN that you can set to be asked for whenever either purchases or setting changes are attempted.
I would suggest that when and if you get the chance, check out the pages of helpful info we have on our support site about that setting here at

Benefits of setting a passkey on your Xbox One console,
How to create an Xbox One passkey and
Require a passkey for purchases on your Xbox One console.

Hope this information was helpful!

Thanks for reading and have a great one!

Tweaked Donkey

Unfortunately, I have not found an answer to this but I recommend creating a passkey to your account so only people with the passkey can have access to your account. Please refer to this website to learn how to create a passkey:

support.xbox.com/.../create-xbox-one-passkey

Trentelshark

Hello,

The passkey goes with you from console to console (Xbox One) based on the following link. It is right at the top:

support.xbox.com/.../create-xbox-one-passkey

Xbox One passkey 100% Bypassable!