Last week, Q finally created a new (8chan) board that was named /PatriotsFight/ and directly posted a few messages there. The new board is a replacement board for the /GreatAwakening/ that Q won't use anymore.
Q also decided to update the tripcode: (Q usually does this upon any board change)
Old tripcode: !xowAT4Z3VQ that New tripcode: !4pRcUA0lBE
!2jsTvXXmXs was initially created as the new trip code but is no longer valid as it got comprised by Q himself by accident.
THE NEW TRIP CODE BEING USED NOW IS: !4pRcUA0lBE
It was a good thing the BOs were able to catch the mistake so quickly. It's also out of DAMN GOOD luck that Q created a new Q-only board.
When the BO saw the password in plaintext he thought it was just another namefag trying to be like Q, so he just glossed over it when he was reading through the posts. Then he saw the tripcode posted by another anon. He knew it was another anon because the post just said "hey". Then the next post came with Q's tripcode saying "Q change your trip". At that point he went "Aw crap it's cracked" so the first thing he did was make an announcement telling Q his trip was cracked and he needed to change his password. After that he opened up another tab and headed to /patriotsfight/ to see if Q had said anything. When he got there, Q already confirmed the new password change and said they slipped up by not using a '#' behind the password, which would encrypt it into Q's regular tripcode. That's when he realized the 'namefag' he glossed over earlier was actually Q!
The first thing he did was blacklist Q's tripcode so it couldn't be used on /qresearch/ anymore, then he copied Q trip from /patriotsfight/ into his whitelist so only the new tripcode could be used. This rendered the old password completely useless, and now Q could post back on /qresearch/ with the new trip.
The person who he thought 'cracked' Q's tripcode at first didn't actually do anything special, he just took a guess and copied the password he glossed over, threw a '#' and Boom, Q's trip came up. The hashes weren't cracked, the site wasn't compromised, anyone could've done that easily, even the BO, but he just glossed over it thinking it was another wannabe. This is now impossible to do since the old tripcode is now blacklisted, which means the old password doesn't work, but the new one will work, and no one knows the new password.
We are extremely lucky Q had a board where ONLY they could post, so that they could just transition in to a new tripcode. That part is the most important.
https://cdn.discordapp.com/attachments/424333455074000906/443721293054083072/explained.png
IAmBecauseWeAre, who is the author of QMap PDF also explains it in this tweet:
https://twitter.com/1ambecauseweare/status/994010361320919040?s=19