account ยท post 05 of 7 in this channel
The WTN market withdrawal pin is not the login password
The registration form asks for a pin as well as a password. Most people set them to the same value, which quietly removes the reason the pin exists.
the three wethenorth market addresses
hn2paw7zfvndw3dovycegeqmvvnf4pl67b3g2p7pohjlzavloosh73id.onionhn2paw7zrgujyhnt6mgxlt2q6uhgbke4itpqitxhyfbumq3wtnckbuyd.onionhn2paw7zadwkcra3qzv5e4q547i7e5lvxm62cfxqftuqdu7moiu2ceyd.onionprinted the way they were handed over. no labels, no numbering, nothing here says which one to try first. this feed never opens them, so it has no status light, no percentage and no date of checking to give you.
two credentials, two jobs
The password says you may open the account. The pin says you may move value out of it. They are different questions and they deserve different answers.
Almost everything you do on the market needs only the first. The pin turns up at the moment something is leaving.
what it protects against
The specific scenario where somebody is already inside your account. A session left open on a shared machine, a password that leaked, a moment of carelessness.
At that point the password has already failed. The pin is the second door, and it only helps if it is a different door.
Which is exactly what setting the pin equal to the password destroys.
why people set them the same
Because the form asks for both in the same ninety seconds and the second one feels like an obstacle rather than a feature.
This is the general shape of the problem across this whole channel. Security decisions arrive bundled with irrelevant friction, and the friction is what people respond to.
Deciding what the pin will be before you open the form is the fix, as it was for the password.
choosing one
Different from the password, obviously. Not a date. Not a repeated digit. Not the pin you use for anything in the physical world, because that one is used in front of other people regularly.
Short is acceptable here in a way it is not for a password, because a pin normally sits behind an already authenticated session and behind rate limiting. It still should not be four ones.
Write it down with everything else. A pin you cannot recall locks your own money in place, and that is a genuinely miserable way to lose access.
when it will come up
Withdrawals, and often other actions that move value or change settings. The post on getting money back out covers the flow it usually sits in.
If something asks for the pin at a moment that is not about moving value, slow down and look at where you are. That mismatch is a signal worth taking seriously.
The same applies to anyone who asks for it in a message. The pin belongs to the market interface and to nothing else. A vendor has no use for it, and support has no use for it either.
A credential that only ever gets typed into one specific box is easy to protect, because every other request for it is wrong by definition.
replies
a reader askedI set the pin and the password to the same thing. Should I change it?
the answerYes, and it is a small job. Change the pin, then confirm the change worked before you do anything else, and write the new one down at the same time.
a reader askedWhat if I forget the pin?
the answerWhether it can be reset depends on the market and usually involves the recovery phrase. Assume it is difficult rather than assuming it is fine, and store it like it matters.
a reader askedDoes the pin protect my account if someone learns my password?
the answerIt protects withdrawals specifically. Someone inside your account without the pin can still read your messages and see your orders, which is its own serious problem.
what this post is not Not a description of a specific market flow. It explains what a second credential is for, so that setting both fields to the same value stops looking like a harmless shortcut.