· None of the above quite fits
· None of these quite match
· Received notice of attempted unauthorized login,twice. Changed my password. I have a VPN, how is it possible for my account to be accessed?
· Router, ASUS, VPN is Nord
Hi @jeromeross99, to aid Roon’s support team …
Can you elaborate on this, what service notified you and what was the exact notification message?
Hi @jeromeross99,
Thank you for your post.
We’ll need a little more context in order to take action here.
First off, you’ve already taken the most secure step, immediately changing your Roon credentials from your account page.
If you’d attempted to login to Roon while the VPN was proxying your connection through an IP address in a different geographic location, it’s not uncommon to receive a security warning email from our account servers. You can disregard this if it was you who took the sign-in action. Our account servers flagged that the authorization request was coming from a region not associated with your account.
This could also occur if you always rely on NordVPN and had it temporarily turned off or assigned to a different server/region.
Do you see any unusual activity listed in the sessions at the bottom of your Roon account page?
We’ll watch for your reply. Thank you!
I suspect I am ok. I often change locations on the VPN. I have noticed no other changes. I changed my login credentials anyway just to be sure. The notifications keep comming from the same state however, Alaska-curious.
Hi @jeromeross99,
Routinely changing your credentials is the most effective defense.
If you’ve created any manual port forwarding rules, double-check that you haven’t inadvertently opened multiple ports or placed your server in front of the router DMZ. Only the port assigned to ARC should remain open to minimize surface area for malicious actors to attack.
We’ll allow this thread to close for now, but please reach outif you find anything out of place.