Anybody else having problems logging into TFL's website. I enter password etc. and then get a "I am not a robot" tick box. After that it just takes me back to the sign on page.
It may be the same problem as detailed in this thread: https://www.railforums.co.uk/threads/tfl-website-issues.188204/
It's in response to a credential stuffing attack where data from a breach (not TfL) is used to see if people have used the same passwords.
Are the issues still persisting? I tried to access my account (from Germany) to update my payment card, but I am re-directed to an "access denied" page that states This happens on account login or when I try to access the password reset page .
The annoying thing now is that they are using that image clicking thing for verification. Am I the only one that finds they are having to go through several versions of images before being successful? Some of the pics really aren't clear at all.
That's all part of the Google Recaptcha service. I do occasionally get asked to click images, but not very often.
BUMP! Has anyone had anymore issues logging in? I went to log in last night and it said incorrect password. I reset my password after the last incident but haven't changed it since. Had several goes at logging in last night before I requested a password reset link. I then completed the reset using my existing password and it accepted it and is now letting me log in with it again! What gives??
https://tfl.gov.uk/help-and-contact/reset-your-password?cid=reset-password https://www.ianvisits.co.uk/blog/20...l-oyster-card-users-to-reset-their-passwords/
Yes, all accounts were reset last Thursday at 1400. There was talk of an email being sent, but I never received one.
That link also says that: Yet I was able to 'reset' my password to the same one that I was using before TFL reset everyones account last Thursday........ I also don't recall receiving an email.
I also managed to use the same password to get in and then immediately reset it on the site. I had no idea what was going on and thought my account may have been hacked and the password changed. Never received an email either, nor have I seen any information about this on the official TfL website. Mike picked up on it the next day on his site which put my mind at ease. Bit concerned about TfL security seeing as how they have my card details for auto top-up on multiple Oyster cards.
I received no email, but TFL forced a password reset on me this week. It was suggesting I might was to change password for a few weeks, which made me wonder if they have had a data leak. I'm sure they have had a breach in the past, a few years ago the email address that was only ever used on oyster site started getting spam. No other email address on the same domain got any spam, and the address wasn't guessable. After that I changed the oyster email address to a new one on the same domain, and blocked the old address.
