It seems there's a lingering problem of autistic, nazi-worshipping, incel trolls hacking into people's gelbooru accounts, and then spamming bad things that soon get them banned.

So yeah, I'm a little worried about this happening to me, and I'm thinking about changing my password. But unfortunately, Gelbooru does not have password recovery features, and won't even let you tie your account to an email. I really don't want to accidentally forget my new password and end up losing this account for good.

Got any advice? Please and thanks.

Change your password. Write down if it's complex.

as far as getting the average online users attention, think Gelbooru is on the fringe. wouldn't worry about it ... too much

why would you be scared for dear life? I would agree with Hee-Ho here,change as often to the point it became complex,but first,prepare a physical note or an offline note software on your PC,and stash it somewhere only you know,since the downside to gelbooru is password(s) are unguaranteed in terms of recovery,you really have to be very serious about where you save your password(s).

no one here is a self-proclaimed spirit medium who like to privy.

"lingering" - I know one example, where somebody thinks that maybe this is the case, with no confirmation. Do you know other examples? If not, then again you are misrepresenting and overblowing an issue. I don't think there's any real problem here.
With that said, the question about security is legit and a pet peeve of mine, so:

If you are not afraid of other people finding it and you want safety for this one thing, writing it down is a good choice, as others have said.

If you want more security that is applicable to other things as well, not just reasonably worthless horny posting, my routine is:
1, One master password I have learned, that is nowhere stored physically. Write it down in your home, if you are not confident in your ability to remember something sufficiently complex and long.
1, (alternative): If you know how to do that and you feel comfortable locking yourself to a physical device that has it (I don't), you can use a keyfile, instead of remembering anything.
2, Use an off-line password storage that you trust (preferably FOSS). I use KeePass (keepass.info/), locked with that password.
3, Keep multiple copies of your storage file, because if you loose that, that's a disaster. Since it is encrypted, it's safe to put it online. I use a free tier dropbox account to automatically sync it across my devices, and include it in my bi-weekly data backups as a last resort.

It was not in the question, but for 2FA I've been using physical security keys for 3 years now (because I don't trust anything that is on a phone), and it has been working great so far.

...and ultimately, accept the fact that none if this is going to help you, if gelbooru itself is "hackable", i.e. they have a security slipup somewhere in the code. :)

Yeah, that's true. It wasn't confirmed if that one case was a hacker or not, so I might be overblowing it a tad.

Although an account laying dormant, suddenly posting nazi incel shit has happened at least 5 times before. Not a whole lot yes, but it's still a possibility.


I'll keep some of this in mind, thanks.

I know SadSap's password

Of course Moonman would know.

You cannot hide anything from Moonman.