What should I do if I received a verification code by email?

What to do about unexpected sipgate verification codes? Causes, security measures, and steps to protect your account.

Why did I receive the code by email?

If you received a verification code by email from our system although you did not log in at all, this is usually because unauthorized persons have obtained your access data.

It often happens that countless credentials are stolen in large quantities from major companies such as Adobe or Dropbox by hackers (breach). If the owners of these credentials then use the same combination of email address and password with other providers, it is relatively easy for unauthorized persons to access these accounts.

To prevent unauthorized persons from accessing sipgate customers' accounts, we send a second factor when logging in - the verification code. If an unauthorized person tries to log into someone else's account, the account holder receives the email and thus the information that there is a security risk. The unauthorized person fails to log into the account.

What can I do to ensure the security of my account again?

To restore the security of a sipgate account, it is unfortunately essential to carry out a few steps. This is not particularly complicated, but it does take some time.

Particularly important: change the email account password

Unfortunately, many people also use the same credentials for their personal email account as elsewhere. To prevent unauthorized third parties from repeatedly gaining access to personal data (e.g. by resetting passwords), it is essential to first update the password for the email mailbox.

Restore account security

If an unauthorized person already had access to a sipgate account, the following steps must be carried out after changing the email password.

1

Change login password

Set a new password for login

2

Renew SIP passwords

Assign new SIP passwords to all devices in the entire account, since they can continue to be used with external devices.

3

Check account

Check whether changes have been made in the account (changes to email addresses or automatic top-up, newly booked contracts or newly created users).

What is the goal behind logging into other people's accounts?

The goals behind unauthorized login to other people's accounts are varied. Most of the time, it is about generating revenue shares by making as many calls as possible to expensive foreign numbers.

How do I best secure my sipgate access?

In the user settings you can enable two-factor authentication. This provides even more security and is strongly recommended by us.