Posted on 07 October 2020 - 01:25 AM

Recently, I have been noticing slight changes in my hypixel network stats, like my guild message of the day changing, though no one has permission to do such, and I believe it may be exploiting that if you have a second account on badlion, whenthe password of that account is changed, you can switch to it on the main screen without entering the password. As this works, my account is slowly changing.

Please fix this, I'd hate for more people to suffer account loss.

Last edited on 08 October 2020 - 06:21 PM by Janmm14

Badlion login is not related to minecraft login.

If you talk about the Badlion Client account switcher:

The Badlion Client is reading the minecraft accounts from your PC only, from the place where the normal minecraft launcher stores it. So if you change your password and log in with the normal minecraft launcher, the updated session key (like a temporary password) of that minecraft account is written to a file. As Badlion Client uses the same file, it is not doing anything special.

If you did not log in with your normal minecraft launcher after you changed your password and were still able to switch the Minecraft Account in the Badlino Client to the one where you changed the password, this is additionally not a problem of the Badlion Client; this would be a severe problem of minecraft's login service: Changing the password should invalidate all temporary passwords.