Wint H.
Unsecured Online Platform
my-CPE offers many course choices under annual unlimited access subscription. That's a plus. However, I’ve discovered that anyone with access to "Welcome to myCPE Family" email that was sent out after purchasing an annual subscription can automatically access my account by clicking “Login Here” link in the email without logging in. I changed my password, logged off my account, cleared all Caches and History, and restarted my computer. But, still “Login Here” link in the email continues giving access to my account automatically without having to login. Such user-specific link in the welcoming email should no longer work once the account holder has secured the account with his/her own unique password. I reported this security breach issue to my-CPE's customer service. Someone from their IT department called me and admitted that it was a technical glitch in their coding and promised me to get it fixed. At the time of writing this review, it's been 7 days, but my-CPE has not resolved this security issue yet. my-CPE website saves subscribers’ credit card, and subscribers cannot delete their credit card without adding a new one. I am no longer comfortable to stay on this unsecured platform.
Response from MYCPE ONEJan 17, 2024
Hello Wint Hlaing, Thank you for taking the time to express your concerns and providing valuable feedback. Your security and satisfaction are our top priorities, and we appreciate your patience as we address this matter. After conducting a thorough investigation into the security concern you raised, we would like to provide some clarification regarding the "Login Here" link in our "Welcome to myCPE Family" email. 1. User-Specific Link: The "Login Here" link is indeed user-specific and is intended solely for the account holder's access. It is designed to facilitate a seamless login process for our users. However, we want to emphasize the importance of not sharing this link with others to ensure the security of your account. We send the email with the user-specific link to the user's registered email address to which the user has only access to. The link will not be accessible to any other person unless the user shares the link or the credentials of their account, which can cause a security breach. 2. Security Measures: We take the security of our users' accounts seriously. Our team is committed to implementing robust security measures to safeguard your information and ensure a secure browsing experience. Rest assured, your account security is of utmost importance to us. 3. Credit Card Information: Regarding credit card information, we want to clarify that myCPE complies with industry-standard security practices. We use secure encryption protocols to protect your sensitive information. If you have specific concerns about your credit card details, we encourage you to reach out to our customer support team, and they will assist you in addressing any issues or inquiries. 4. Ongoing Improvements: Our IT team is actively working on enhancing the website to make it more user-friendly and easy to use. We understand the importance of providing a secure platform for our users, and your feedback plays a crucial role in our ongoing efforts to enhance our services. We sincerely apologize for any inconvenience caused, and we are committed to addressing and resolving these issues promptly. If you have any further concerns or if there's anything specific you would like assistance with, please don't hesitate to contact our customer support team. Thank you for choosing myCPE, and we appreciate your continued trust in our platform.