If you play pickleball and use DUPR, you've probably seen the last week play out: an outage, an email about a security incident, and now a wave of players saying they still can't log back in cleanly. This post is the practical one — what to do if you're locked out right now, what players are reporting about lost matches, and how to protect your own match history going forward so it doesn't depend on any single app staying up. For the full timeline of what's confirmed vs. still unknown, see our DUPR outage explainer.
One note up front: VolleyForge isn’t affiliated with DUPR. We’re a league and tournament platform that happens to track player skill too, and DUPR’s outage is relevant to our players, so we’re covering it the same way we’d cover any practical problem affecting people who play. Nothing below is a DUPR statement — it’s DUPR’s own confirmed facts plus what players are reporting, clearly labeled.
What’s actually confirmed
DUPR experienced a security incident in early September 2026 and notified users directly by email. That email stated DUPR does notstore financial, payment, or password data on its systems. The app and website were down for roughly two to three days and were restored around September 8, 2026. As of this writing, DUPR has not posted anything about the incident on its own blog or site — the only disclosure has been the email. That’s the full list of what’s confirmed; everything else below is players describing their own experience, not an official statement.
The login and MFA loop players are reporting
Since the app came back, players on r/Pickleball report a rough re-entry experience for some accounts. The recurring complaint is a multi-factor authentication loop: DUPR sends a six-digit verification code, but the code email either never arrives or arrives with nowhere in the app to enter it. A smaller number of posts mention club-staff logins being disabled outright. None of this is confirmed by DUPR as a known bug or a deliberate security measure — it’s what users are experiencing and posting about, and it appears to affect some accounts and not others.
If you’re locked out right now
There’s no confirmed fix, since DUPR hasn’t published one. The steps below are standard, sensible account-recovery practice for an email-code login problem like this — not something DUPR or other players have confirmed resolves this specific loop, but a reasonable place to start, roughly in order of least to most drastic:
- Check spam/promotions folders for the verification code email before assuming it never sent — verification-code emails are commonly caught by spam and promotions filters, especially right after a service restores and email volume spikes.
- Force-close and reopen the app, or try the mobile site in a browser if you normally use the app (and vice versa) — login and code-entry flows aren’t always implemented identically across an app and its browser site, so switching is worth trying if one path seems stuck.
- Wait a few minutes between attemptsrather than repeatedly requesting new codes — many email/MFA systems rate-limit or invalidate a code when a new one is requested too soon, so mashing “resend” can work against you rather than for you.
- Contact DUPR support directlythrough the app or their official site rather than a third party, and mention the specific symptom (no code arriving vs. no field to enter it vs. staff login disabled) — that’s the detail support will need.
- Be patient with club-managed accounts.If you play through a club and staff logins are affected, the fix is likely on DUPR’s or the club’s end, not something you can resolve from a player account.
If none of these steps resolve it, the fix is most likely on DUPR’s end rather than something a player account can work around — keep your support request open and check back after DUPR’s next update.
Worried a match disappeared?
A second thing players on r/Pickleball are reporting: matches entered shortly before the outage reportedly never finished rating calculation and now appear to be gone, including some matches from PPA events. From what’s being described, existing ratings appear to have been preserved, but very recent match history may not be. This is not confirmed by DUPR — treat it as a live, unresolved report, not a settled fact. If you entered matches in the days right before the outage, it’s worth checking your match history now and screenshotting anything that looks off before more time passes.
Keep your own copy, going forward
Whatever the outcome of this specific incident, it’s a reasonable moment to stop treating any single rating app as your only copy of your own match history — it’s part of a bigger conversation about portable, transparent rating data that we lay out in our case for portable, transparent pickleball ratings, but you don’t need to wait for that debate to protect your own history today. A few habits that cost almost nothing:
- Screenshot or export after tournaments and league nights— a photo of the final score sheet or bracket is enough; you don’t need anything fancy.
- Keep a simple running log — a notes app or spreadsheet with date, opponent, score, and event is enough to reconstruct your season if any one app has an outage or a data hiccup.
- Play in leagues and tournaments that keep their own record, separate from whatever rating provider they might also report to. On VolleyForge, your match history and standings live with your league or tournamentand your player profile — they’re not something you lose access to if a third-party rating app goes down.
To be clear: this isn’t VolleyForge positioning itself as a DUPR replacement or a rating authority. We currently use self-entered skill levels, not an independently calculated rating — see how pickleball ratings actually work for how that compares to DUPR, or what pickleball level am I?if you’re not sure where you stand. It’s a more modest point — your own match history is worth keeping somewhere you control, in addition to whatever rating app you use.
General account safety, whether or not you were affected
DUPR’s email said it doesn’t store financial, payment, or password data — that’s a good thing, and it’s worth taking at face value since it’s the one specific, confirmed claim DUPR has made. That said, any account tied to your email address is a reasonable prompt for basic account hygiene, on DUPR or anywhere else:
- Stop reusing passwords across sites. If your DUPR password is the same one you use for email or banking, change it — not because DUPR said passwords were exposed (they said the opposite), but because password reuse is the single biggest risk factor in any account, on any app, at any time.
- Turn on two-factor authenticationwherever it’s offered, including on your email account — that's often the more valuable one to lock down, since an email compromise cascades into every account tied to it.
- Watch for phishing emailsthat reference the DUPR incident asking you to "verify your account" or "reset your password" through a link. If in doubt, go to DUPR’s app or site directly instead of clicking an email link.
This is general security hygiene that’s worth doing after any app you use reports a security incident — not a claim that your DUPR password specifically was exposed.
Keep track of what we know
We’re updating our DUPR outage explainer as more information becomes available. If you organize a league or tournament, our organizer playbookcovers how to keep a season running through any rating-provider outage. If you’re looking for a game in the meantime, or want a place where your own match history and standings live independently, you can browse open games near you or create a free VolleyForge profile — in Kansas City, start with the Kansas City pickleball hub.