LDS Account, MRN security, and mobile tools

LDS Account is the primary user account (user name and password) for accessing online Church resources. This forum is a space to discuss all things related to LDS Account (registration, account recovery, user experience, vulnerabilities, etc.).
chrispadilla
New Member
Posts: 10
Joined: Fri Jan 21, 2011 10:29 pm
Location: Phoenix, AZ

I'm really not understanding

Postby chrispadilla » Fri Jan 28, 2011 5:26 am

RussellHltn wrote:And I seem to remember some hints that there might be some financial tie-in in the future. If that's on the drawing board, it would explain what's happening the MRNs now.



Foolproof? I don't think it exists. But I would suggest that a list tucked into the recommend book is likely more secure then having it run around on the Bishopric's smart phones.

As for updating the list, I seem to remember some "minimum time" requirements that have to be met. Otherwise a call to the prior Bishop is in order. So I'd think updating the list each quarter or so would do fine.



What's the big deal with the MRN? Security... from what? The address and phone number are available and if some stalker wanted access to you they're not going to look for your MRN. :mad: I guess it's just my little rant about a decision that's hurting more than it's helping. Anyone out there that really understands the decision, I welcome your input... Not really interested in the, "Brother, that's the way it is" comments...

eblood66
Senior Member
Posts: 2832
Joined: Mon Sep 24, 2007 8:17 am
Location: Cumming, GA, USA

Postby eblood66 » Fri Jan 28, 2011 7:48 am

chrispadilla wrote:What's the big deal with the MRN? Security... from what? The address and phone number are available and if some stalker wanted access to you they're not going to look for your MRN. :mad: I guess it's just my little rant about a decision that's hurting more than it's helping. Anyone out there that really understands the decision, I welcome your input... Not really interested in the, "Brother, that's the way it is" comments...


The MRN is the key to getting access to the LDS Account for someone. With access to LDS Account you can get access to Family Search for the person which provides personal information like birthdate, mothers maiden name or other information that could be used as security questions for their banking and other financial web sites. The LDS Account for a leader also provides access to similar personal information for all the the members of their unit.

I'd say that there is plenty of harm that someone could do with access to the right LDS Account.

russellhltn
Community Administrator
Posts: 24241
Joined: Sat Jan 20, 2007 2:53 pm
Location: U.S.

Postby russellhltn » Fri Jan 28, 2011 10:35 am

chrispadilla wrote:What's the big deal with the MRN? Security... from what?


Security for the member's LDS Account. I believe at some point in the future the LDS Account will have access to financial information. And, legally that will change things. I believe the move in securing the MRN is in preparation in what is to come.
Have you searched the Wiki?
Try using a Google search by adding "site:tech.lds.org/wiki" to the search criteria.

chrispadilla
New Member
Posts: 10
Joined: Fri Jan 21, 2011 10:29 pm
Location: Phoenix, AZ

Postby chrispadilla » Fri Jan 28, 2011 10:57 am

What about access to the username, password, and email address? Are you saying knowing the MRN also provides access to these three items as well?

RossEvans
Senior Member
Posts: 1346
Joined: Wed Jun 11, 2008 8:52 pm
Location: Austin TX
Contact:

Postby RossEvans » Fri Jan 28, 2011 11:25 am

chrispadilla wrote:What about access to the username, password, and email address? Are you saying knowing the MRN also provides access to these three items as well?


The MRN in combination with birthdate will allow anyone to establish an LDS Account. The MRN in combination with confirmation date will allow anyone to hijack an existing LDS Account -- even that of a stake president or bishop, which in turn opens the door to a trove of other confidential data. (Someone posted here the other day that they were able to gain access to an existing LDS Account knowing only the MRN and birthdate, but I don't understand how.) In any case, the LDS Account is key, so it obviously is more sensitive than it used to be. The use of MRNs in LDS Account authentication a known factor today. The idea of accessing financial data by LDS Account in the future seems like speculation.

russellhltn
Community Administrator
Posts: 24241
Joined: Sat Jan 20, 2007 2:53 pm
Location: U.S.

Postby russellhltn » Fri Jan 28, 2011 11:27 am

chrispadilla wrote:What about access to the username, password, and email address? Are you saying knowing the MRN also provides access to these three items as well?


I only looked at the first screen, but I see it only asking for the MRN and Birth Date to gain access to a LDS Account.
Have you searched the Wiki?

Try using a Google search by adding "site:tech.lds.org/wiki" to the search criteria.

User avatar
aebrown
Community Administrator
Posts: 15063
Joined: Tue Nov 27, 2007 8:48 pm
Location: Sandy, Utah

Postby aebrown » Fri Jan 28, 2011 12:26 pm

RussellHltn wrote:I only looked at the first screen, but I see it only asking for the MRN and Birth Date to gain access to a LDS Account.


That's all that is needed to create an LDS Account, but if you've forgotten your password for an existing LDS Account, and your email no longer works, you can gain access to that account only if you know your MRN and your confirmation date.
Questions that can benefit the larger community should be asked in a public forum, not a private message.

chrispadilla
New Member
Posts: 10
Joined: Fri Jan 21, 2011 10:29 pm
Location: Phoenix, AZ

Postby chrispadilla » Fri Jan 28, 2011 12:31 pm

I do see the issue, but I don't think removing that from MLS has the desired effect... I see more paper copies with the MRN floating around the church now... IMHO.

Technically it sounds like more data should be requested that isn't tied to the record for authentication. But, I'm sure those driving the bus have already thought about all that and it's ramifications.

Thanks guys for pointing out some things that I knew but weren't coming to mind this morning.

russellhltn
Community Administrator
Posts: 24241
Joined: Sat Jan 20, 2007 2:53 pm
Location: U.S.

Postby russellhltn » Fri Jan 28, 2011 1:45 pm

aebrown wrote:That's all that is needed to create an LDS Account, but if you've forgotten your password for an existing LDS Account, and your email no longer works, you can gain access to that account only if you know your MRN and your confirmation date.


That's what I remembered, but I checked before I posted (that's how Ross scooped me)

I played dumb and indicted that I had forgotten my LDS Account name. At that point I'm asked for MRN and Birth Date.

That's all the further I went. It's entirely possible I may have to supply more information to take over an account, but that's all that's needed to start the process.
Have you searched the Wiki?

Try using a Google search by adding "site:tech.lds.org/wiki" to the search criteria.

russellhltn
Community Administrator
Posts: 24241
Joined: Sat Jan 20, 2007 2:53 pm
Location: U.S.

Postby russellhltn » Fri Jan 28, 2011 1:50 pm

chrispadilla wrote:I see more paper copies with the MRN floating around the church now... IMHO.


I disagree. This was discussed extensively here.
Have you searched the Wiki?

Try using a Google search by adding "site:tech.lds.org/wiki" to the search criteria.


Return to “LDS Account”

Who is online

Users browsing this forum: No registered users and 1 guest