I was forced to reset my password about a month ago, and had no problems using the mobile app, but every time I tried using PayPal through a desktop browser, whether it was to login to my account or process a purchase, I'd get an error message saying "Some of your info isn't correct", so I just continued using the app for the time being. Today I wanted to resolve the desktop login problem, so I reset my password again. I can now login via desktop browser using the new password, but the app also still logged in in one tap with the old password until I logged out and entered the new one. This was not a "minimized" previous session on the app running in the background - the app was closed on my mobile, I reset my password from the desktop, and the mobile app reopened into my account without prompting me for the new password. What is going on? How is a security flaw like this allowed to happen? What if I reset my password from my laptop because my mobile was lost or stolen? Nightmare scenario.
... View more