The wiki is currently undergoing some major improvements. If you need some information and you don't know where to look, please come to #ecnet

From ECNet Wiki

User Procedures

If you have forgotten your NickServ password, please contact an operator in #ecnet for assistance. They will reset your password and e-mail it to the address on file in NickServ.

If you did not provide an e-mail address or no longer have access to the e-mail address on file for your nickname, it may not be possible to reset your password. We will make every attempt to make an independent verification of your identity, but this cannot be guaranteed. This policy is in place to protect hostile take overs of users' nicknames. If your nickname is important to you, please make sure you have a current e-mail address on file in NickServ.

To see the e-mail address for your nick issue the following command after identifying with NickServ:

/NickServ INFO yournick ALL

To set the e-mail address for your nick issue the following command after identifying with NickServ:

/NickServ SET EMAIL you@example.com

Operator Procedures

• 1) Change the user's password to something YOU want it to be, not what they requested. DO NOT tell them what you changed it too. A good password generator, use a random 12 character section.
• 2) Find the e-mail address linked to the registered nick, not one given to you by the person requesting the change.
• 3) E-mail the new password to the user with an explanation of why the password was changed and how to set it back to something of their choice.

This way, we can verify the password is only given to the true owner of the nick. If the true owner did NOT request a password change and it was a take over attempt, the attacker never gets the password and the true owner will still know the new password you chose for them.

Example

A user named B0b signs on and registers their nick with NickServ using the following command:

/NickServ register B0bs_p4ssw0rd B0bby@example.com

A week later B0b signs on again but has forgotten the password. B0b asks you to reset it. You let B0b know that you will reset the password and e-mail it to the registered e-mail address. You then reset the password to B0b.t3mp with the command:

/NickServ saset B0b password B0b.t3mp

Obviously, you will need to choose a temporary password that is NOT like the example, see above for a link to a good password generator. Next you get B0b's e-mail address with the command:

/NickServ INFO B0b ALL

This yields:

[12:00am] *NickServ* B0b is B0b
[12:00am] *NickServ* B0b is a user.
[12:00am] *NickServ* Is online from: B0b@c-1-0-0-127.slsp.md.comcast.net
[12:00am] *NickServ* Time registered: Jan 1 00:00:00 2006 CDT
[12:00am] *NickServ* Last quit message: Quit:
[12:00am] *NickServ* E-mail address: B0bby@example.com
[12:00am] *NickServ* Options: Security, Private

Then send the following e-mail to B0bby@example.com:

To: B0bby@example.com
From: oper@ecnet.org
Subject: ECNet Password Recovery Request

Hello,

We have received a password recovery request for your nickname 'B0b' on the
ECNet IRC Network. As a security measure, we are e-mailing you a temporary
NickServ password.

The new NickServ password for B0b is: B0b.t3mp

To change your password to a password of you choosing, login using the temporary
password and issue the following command: 

/NickServ set PASSWORD new_password_here

You will no longer have to use the temporary password after this. If you did NOT
request a password change, please contact an oper in #ecnet ASAP and report a
nick take over attempt. You may also e-mail our abuse team at abuse@ecnet.org.
You will still need to log in and change the temporary password. If you think
you have received this e-mail in error please disregard it and/or send a reply
e-mail notifying us of our mistake.

Thanks for using the ECNet IRC Network,
Your Name (and/or nick)
Server Admin/Operator

After this, B0b can identify with the temporary password, set up a new password, and be chatting it up again in no time. Otherwise, the user can report back that the request was invalid and the matter will be escalated to the abuse team.