Industry guru Dave Taylor answers free tech support questions about a wide variety of business and technical topics, including blogging, Google AdSense, MySpace, Sony PSP, Apple iPod, Mp3 players, management, Linux, SEO, Mac OS X, Facebook, Twitter, LinkedIn and Microsoft Windows.

Retrieve your Yahoo password with trick, secret email?

I dunno if this is legit or not, but I recently bumped into a note from someone claiming that there's a secret email address at Yahoo.com that lets you sneak into a backdoor and recover any account password for any account on Yahoo. The address was "recover_pswd@yahoo.com" and it sounds too good to be true. Is it?


Dave's Answer:

Oh yeah, it's far too good to be true and is actually a smart, sneaky social engineering hack where what they actually are going to obtain is your account and your password, which they'll promptly change.

Here's a typical message from one of these phishers:

"I got my Yahoo Id hacked and I am not able to use it anymore. I called up yahoo customer care and they r asking me the answer to my secret question which I dont remember now as it was 5 or 6 years ago. I tried one of the tricks on my account just for fun.."

Seems legit, doesn't it? I've also seen these from Gmail and Hotmail too, by the way, so just about any service with a password and lots of potentially naive, trusting users can be a target for these sneaky tricks.

Here are the steps recommended by the phisher:

  1. Log in to your own yahoo account. Note: Your account must be at least 30 days old for this to work.
  2. Once you have logged into your own account, compose an e-mail to: recover_pswd@yahoo.com
    This is a mailing address to the Yahoo Staff. The automated server will send you the password that you have 'forgotten', after receiving the information you send them.
  3. In the subject line type exactly: password retrieve.
  4. On the first line of your mail write the email address of the person you want to hacking.
  5. On the second line type in the e-mail address you are using.
  6. On the third line type in the password to YOUR email address (your OWN password). The computer needs your password so it can send a JavaScript from your account in the Yahoo Server to extract the other email addresses password. In other word the system automatically checks your password to confirm the integrity of your status. Remember you are sending your password to a machine not a man. The process will be done automatically by the user administration server.
There are sometimes additional steps requested, but that's the gist of the message, and as you can see, it really boils down to send us your account name and password which is clearly not a good idea!

Let me be clear in case you're still unsure what I'm saying here: this is a scam, there are no secret email addresses at any of these services that can recover your password, and you should never, ever email your account password to anyone, even if they assure you that they are a part of the corporation!

Follow up note: Some people have told me that they saw this article, skimmed it, saw the email address shown above, and followed the procedures without actually reading that it's a scam. Please do not do that!! The reason I show a real address is so if people Google that address they'll find this article that warns them about the scam, not because I am at all involved in this nefarious social engineering scheme.



Help others find this article at Del.icio.us, Digg, Netscape, Reddit, and Simpy.

Subscribe!

Never miss another useful Q&A article again! Subscribe to AskDaveTaylor with Google Reader.

Comments

I love the "forgot the answer to my secret question" part. Now what is my mother's maiden name? Hmmmmmm

Posted by: Dempsey at March 12, 2007 11:30 PM

dave i try this a couple of times but it did t work it said that the e mail adress i m sending message dosent have base on yahoo. please contact me i m trying to find out the password of my wife e mail i feel she in contact almost every single day with someone, we are just married and i dont want to be unconfortable by asking the password to her you know, i really dont know to much about computers so i will really apresiate if you try to find the password of my wife,please, please .

Posted by: julian at March 20, 2007 4:28 PM

Dude I think u have created that id and wana know our passwords. u cheating mann!!! huh

Posted by: Manul at March 23, 2007 11:08 AM

its my own email id.. someone has hacked it and i want it back... i have wasted a huge time for its recovery....

Posted by: anand at March 28, 2007 9:52 AM

very good guide, i hope i can retrive my hacked account this way.. :) thanks a lot mate..

Posted by: jayah at April 1, 2007 5:26 AM

I am jennifer Wilfred,I finished on a public computer last fours days night,when it gets to the other morning,i now went to the cafe to send mail...Unfortunatly my Id and password was wrong..pls and pls i dont know what to do pls can u kindly help me out..I would be greatfull if u can help me out
Thanx for the patronage
Jennifer

Posted by: Jennifer Wilfred at April 6, 2007 4:31 PM

are you people stupid? the article says that its A SCAM!! dont try it, you will simply lose your own password!! why is everyone saying "thank you, now i can get my password" as if the instructions really worked??

Posted by: rich at April 12, 2007 11:31 AM

Hope so it really works!!!
It will be a real great help!!!

Posted by: Nitin at April 13, 2007 11:41 AM

Please help me for my yahoo password

Posted by: Amrita at April 16, 2007 2:43 AM

All those services for instant retrieval passwords are scams.The only actual way to get a password is done by 2 things:
Password crackers ( brute force method)
Social Engeneering (sending out fake login pages)

Posted by: nozf3r4tu at April 29, 2007 4:44 PM

Dave,
Do the spyware like Pandora and Cheater Checker work -- and what are the risks to my own computer if I download one of their programs?

Posted by: Marisa at May 7, 2007 9:29 AM

ok if u really want to see if it works make up a new yahoo id, send them the the NEW ONE and make sure ya don't use the same password on the one you wish to keep.. you will see it is 100% scam. next issue.. u want ppl's passwords.. i caught my cheatin wife with a keystroke logger.. downloaded it for free off a torrent site. installed it and sat back.. oh find one that e mails you the updates then you don't have to look @ the computer you set it up on.. do it from work or where ever.. now watch out some anti viri detect the pop feature and then they will know.. i'm not goinna tell you the program that works best.. google is your best buddy.. oh yea.. one more thing for newbies.. on e mail accounts.. it don't hurt to have a few.. mainly a dump one for things like this so ya don't get spam..

Posted by: mike litt at May 18, 2007 1:18 AM

ARE YOU PEOPLE CRAZY!THEY ARE STEALING YOUR OWN PASSWORDS!!!!CORRECTION,YOU ARE GIVING AWAY YOUR OWN PASSWORD!!THIS IS THE BIGGEST SPAM EVER!! YOU REALLY THINK IT'S SO SIMPLE TO HACK ACCOUNT!!??

Posted by: mihaelo at May 22, 2007 2:46 AM

im unable to get the password thru this technique pleas help me out..

Posted by: sandy at June 12, 2007 10:23 PM

How can i recover an email sent to wrong person?
How long would it take?

Posted by: Jessica at July 3, 2007 10:34 PM

Hy guys DO NOT TRY theese ridculus scams, they just want to know ur ID and YOUR PASSWORD so that they can hi-jack your email, yaho messenger , and even your personal DETAILS DO NOT TRY ANY OF THEESE SCRIPTS, i tried once before and got my yahoo messed up so never again !!!! READ AND UNDERSTAND WHAT I AM SAYING geeez .. NONE of theese SCAMS actually WORK!!!!!

Posted by: DJChris at July 6, 2007 6:49 PM

Hi there. . . I try to recovery my yahoo password, but it dosn't work. Please if you have any instructions,let me know. . . Regards

Posted by: DynamicXxl at August 9, 2007 2:27 AM

You are IDIOTS to give out your passwords.

I hope you get your bank accounts cleaned out.

Posted by: You Fools at August 13, 2007 3:14 PM

your are a good hacker dude.. but your trick to hack password is not enough to convince me.. recover_pswd@yahoo.com only stupid person gona send his own password....

Posted by: mhar at August 26, 2007 4:19 AM

any one hack my id

Posted by: shabbir at September 1, 2007 8:54 AM

don;t try to make anyone fool. and use any new trick to hack. this is very old technique.

I will suggest to all that no one plz give their password to any these types of stupid id. recover_pwd@yahoo.com or similiar type ids are fake id of this person not from the yahoo.

Yahoo only provide recover password through forget password session on yahoo site.

Posted by: Ankit Jain at September 15, 2007 1:07 AM

hi i am forget my password . i had create my id so many long time so i cant remeber this configraction so plz help to find my id password

Posted by: soni at September 26, 2007 7:10 AM

yeah y'all its a really old trick i have tried so many times but its doesn't workout...so dont waste time on these things..cos pple fake things here..

roxvy

Posted by: Roxvy at November 20, 2007 7:47 AM

The comments on this article shows that 90% people do not have any idea about computers,uthentication process and password management ......

If you lost ur yahoo password pls contact Yahoo technical support..

Verify ur self u will get ur password If you can not answer there question's ask for other options .........


Posted by: Fazzy at December 27, 2007 10:53 AM

how can i know about my yahoo secret yahoo mail answer its very urgent for me to find it. please some one gave me a solution for finding my own yahoo secret question that i am selected but unfortunatly i am forget that secret answer.

Posted by: Arslan at January 6, 2008 7:47 AM

I have forgete my yahoo password how can I get my password please tell me the trick.

Posted by: amar at January 24, 2008 12:21 AM

i have forgotten my password how can i open my id.

Posted by: bekri idris at February 8, 2008 3:31 AM

Look...I have four accounts in yahoo, i tried this thrick and it doesnt work, i try another like this and non...of course i use 2 accounts completely empty, just to demostrate it to my brother that is married and wanna know the (fiance pass)
I made it for fun, if you r thinking that u will get your passwords back...you are really NUTS !! And whats the needing of hacking other ?? Go TO HELL !!!

Posted by: Eduard at March 16, 2008 4:36 PM

dont try it...... u r not hacking someone else password..... instead u r giving ur password to them.

Posted by: manpreet at March 19, 2008 2:44 AM

My yahoo ID password is not working for so many months. I asked the Customer care for a new pwd, they are asking me to give Pet name, Date of Birth, Zip Code. My yahoo ID got created more than 10 years ago by my old friend. He is no more in contact with me. I don't know what he gave to all the items said above. Please suggest me how i can get a new password to login again. I have good valuable information in my yahoo ID.

your help in this is really appreciable.

Thanks,
Ravin

Posted by: Ravin at March 24, 2008 10:51 AM

donot send ur password noboby cont find others password. its only posssible with the yahoo system adminisrators.....the interest of knowing someones's password u r sending ur password......please remember that fool are sending their passwords.........

dont try it...... u r not hacking someone else password..... instead u r giving ur password to them.


urs
suresh116117
kadapa

Posted by: suresh116117(kadapa) at March 25, 2008 2:30 AM

Suresh,

In my case what do you want me to do. Do you know Yahoo system administrators ID so that I can ineract with them. I feel in my case my pwd got blocked due to not accessing for long time. And to generate new pwd, I need to give my DoB, Pet Name, Zip Code which I don't know them. Suggest me friend.

Thanks,
Ravin

Posted by: Ravin at March 25, 2008 4:59 AM

Please help me to get password of my sister, I suspected that she got interaction with many unwanted guys, please please please help me to find her mail password, its request

Posted by: Krishnamurthy N at March 30, 2008 11:37 PM

Hi all,

All the Above details are fake , i paid 200 $ but still i havent recived my password.

Posted by: Taimor Marufi at April 5, 2008 1:05 AM

dont! believe to this instruction. its a "SCAM".
I tried it so many times but nothing happened. Im still lucky when I did this. I used trying my two email that i dont use anymore..

well hacking password is not easy as that. I have my own way but I wont tell anybody because if i do. Everybody might abuse.

Posted by: orastigon at April 8, 2008 9:53 AM

Hi I have a yahoo account that I am having trouble remembering the password the last I used the account was 2003 since then I been on and off trying to reopen the account and I am unable to. You would think the account should be deleted by know. How do I retrieve my password?

Posted by: Ellie at April 18, 2008 5:34 AM

This doesn't work. I supplied the details below:

subject: password retrieve
sammysmith@yahoo.com
bobmoney@yahoo.com
password1

Are they correct?

Posted by: Bob Money at April 21, 2008 9:23 AM

hey all, i hope anyone don't get fooled by that old hacking technique tric.... ur actually sending UR (YOUR) own password to DAVE (YES DAVE) haha! dave fooled u all.... plz ppl it's just a hacking teqnique that dave uses.... while ur thinking ur sending the email to yahoo... u are actually sending it to dave... n he would recieve ur password.... !!! don't worry ppl..i'm on my way to discover to hack ppl yahoo and hatmail email password... n i can share it to u all... i can do it...but it's a meathod i can't share with u all..sry...!!! but yes..don't let dave fool u all..plz.... (listen, everyone post links like this on the internet..don't u think yahoo would have already change their account)and yes..when ppl find out about ppl like dave..they shut down their account...so plz don't try it! thankx

Posted by: zanthor at April 21, 2008 5:33 PM

Zanthor, if you would spend the time to read what I wrote in the original article, you'd realize that I am not interested in anyone's account, I am instead explaining that this is a SCAM and that there's no way for anyone to extract a password from the Yahoo system. If you send your information (this means you, Bob Money) then you'll simply find that you're shut out of your own account. Don't do it.

Posted by: Dave Taylor at April 21, 2008 8:46 PM

PLEASE HELP i forgot my password for my yahoo acount .... and i need it to log into some of my other programs PLEASE HELP .....

Posted by: Steven at May 15, 2008 3:45 PM

it doesn't work!!!!!!!!!!

Posted by: kasperky at May 17, 2008 10:51 AM

As I had a account named piphro@yahoo.com that was hacked and information was changed.I had an organization website and I am unable to log on my account since long..plz help me to get back my passward

Posted by: Fayaz Hussain Abro at June 2, 2008 11:39 AM

i forgot my Email id pass word.

Posted by: akash at June 8, 2008 11:31 PM

I have a lot to say, but ...
Starbucks coffee cup I have a lot to say, and questions of my own for that matter, but most of all I'd like to say thank you for all your efforts on this Web site by buying you a chai!

I do have a comment, now that you mention it!









Remember personal info?


Please note that I will never send you any unsolicited commercial email. Ever.

While I'm at it, please note that by submitting a question or comment you're agreeing to my terms of service, which are: you relinquish any subsequent rights of ownership to your material by submitting it on this site.









Uniblue: Free Virus Scan

Search
Find just the answers you seek from among our 1700+ free tech support articles by using our Lijit search engine.


Help!





Subscribe to
Ask Dave Taylor!

Add to Google Reader
Add to My Yahoo!
Subscribe in NewsGator Online

RDF   XML

Free Updates!
Sign up and get free weekly updates and special offers on books, seminars, workshops and more.


Recent Entries
Join the List!
Join my author info mailing list, where you'll learn about my upcoming books, speaking gigs, and more!


Book Links
© 2002 - 2008 by Dave Taylor. All Rights Reserved.

Note: This web site is for the purpose of disseminating information for educational purposes, free of charge, for the benefit of all visitors. We take great care to provide quality information. However, we do not guarantee, and accept no legal liability whatsoever arising from or connected to, the accuracy, reliability, currency or completeness of any material contained on this web site or on any linked site.

[whiteboard marker tray]