Please or to access all these features

Site stuff

Join our Innovation Panel to try new features early and help make Mumsnet better.

See all MNHQ comments on this thread

Due to a security breach we are resetting all passwords across Mumsnet

729 replies

RebeccaMumsnet · 12/04/2014 17:32

Following the recent security breach related to Heartbleed we are reseting the passwords of all users.

On Saturday 12 April, we will remove all passwords from our system and to use the site, you'll need to reset your password by clicking on the password reset link.

Type in your email address and click the 'Request reset' button and you will receive a mail to your Mumsnet registered email account. (You will need to click on the link in the mail within 30 minutes of receiving it, without changing the device you're using i.e swapping from phone to laptop, or you'll need to request a further reset).

If you do not receive a mail, please check you spam folder. The password reset mail will come to the email you used when you first registered with Mumsnet.

If you don't receive or can't access your reset mail, please [email protected] for help.

We are very sorry for all the fuss. We want to assure you that we followed all the published steps to protect members' security as soon as we became aware of the heartbleed security risk, but it seems that the breach occurred prior to that risk becoming known.

Most importantly, if you use the same password here as elsewhere, we strongly recommend you change your password on the other sites too.

Thanks,

Justine & the MNHQ team

OP posts:
Tiredmumno1 · 12/04/2014 23:13

It took me forever to change my password, it wouldn't let me do it for ages.

I thought I'd lost you all forever.

Quinteszilla · 12/04/2014 23:13

Well, I am going to bed.

Tomorrow will tell if the Langoliers came and ate mumsnet, or me. Or all of us. Or if Godot wrote himself into an alternative ending, and in fact arrived. (Maybe he did, when the curtains had fallen and we all left this theater)

GwenStacy · 12/04/2014 23:13

Rowan - I work in email marketing and database management and under ico rules you're allowed to contact people with what's classed as a 'fulfilment' type email even if they have asked not to be emailed, so you wouldn't be falling foul of spam rules if you emailed everyone :)

RowanMumsnet · 12/04/2014 23:11

We will try to get to the bottom of it, although in all honesty it's probably not going to happen tonight... sorry

FWIW we've had a couple of mails saying Hotmail and Yahoo mail both seem to be struggling tonight (with their own issues) - so it's possible that some of these non-receipt issues are to do with your email providers rather than us. But we'll try to work it out.

BiscuitCrumb · 12/04/2014 23:09

Definitely not Facebook or Google. Definitely correct email address - worked 2 days ago when I name changed and reset when I first heard about heartbleed. Just not working now!

Bet you lot at HQ are busy!

usualsuspectt · 12/04/2014 23:09

This reply has been deleted

Message withdrawn at poster's request.

usualsuspectt · 12/04/2014 23:08

This reply has been deleted

Message withdrawn at poster's request.

ThePearShapedToad · 12/04/2014 23:06

I know biscuit, think it's probably a good wake up call that we'd all become a bit lax, across all websites, not just MN

Why companies can't just see that I'm a good girl and don't steal data / credit card info etc and just let me sign in without having to remember the circumference of the moon on a cloudy night whilst being hidden by Jupiter, I don't know Grin

I often think the same walking through airport security. Can't they see I'm sweet and adorable?!!

MadBusLady · 12/04/2014 23:06

I haven't had the email either, not in junk, not in deleted, and I get mn emails to that address all the time. If I hadn't happened to see this in active convos I wouldn't have known to change my password.

usualsuspectt · 12/04/2014 23:06

This reply has been deleted

Message withdrawn at poster's request.

VivaLeBeaver · 12/04/2014 23:05

I'm not getting an email from you after requesting a reset one. Its the right email address on my account.

Maryz · 12/04/2014 23:05

This reply has been deleted

Message withdrawn at poster's request.

RowanMumsnet · 12/04/2014 23:05

@Friedbrain

How did I manage that?

I only requested a new password?

If I set up a whole new.account (don't know how tho) how did it just choose a name for me???

In all honesty we've got no idea. People who register without choosing names do get assigned a random username, but it's usually a fairly incomprehensible string of letters and numbers...

Darkesteyes · 12/04/2014 23:04

I seem to have done it ok

Quinteszilla · 12/04/2014 23:04

If you're not receiving the reset mail at all, it may be worth double-checking that the email address you're checking is the one that you used to sign up to Mumsnet, as that's the address we will be sending the reset mail to.

I know for a fact it is that email, as this is the email I get MNHQ mails to.

RowanMumsnet · 12/04/2014 23:03

@BiscuitCrumb

I requested a password change and nothing... Not in spam either.

I'm now worried Rebecca's OP is a hack and we are all entering email addresses and clicking on links and exposing ourselves more? - paranoid moi?!?!

Sorry you're having trouble Biscuit - here's our exciting, ever-evolving list of things to double-check:

*

If you signed up via Google or Facebook, there's no immediate need for you to change your password on Mumsnet - you can just carry on signing in via Google and Facebook. Best advice at the moment is to change all passwords for all services, but that's entirely up to you. Right now you won't be able to change your Mumsnet password because users who signed up via these methods didn't have their email addresses 'confirmed', and without a confirmed email address the reset password email won't reach you. The short version being - please carry on using Google or Facebook to log in and don't worry for now about changing your MN password.

If you've asked for a reset but got a blank message or a message asking you to confirm your email address, it sounds as though you didn't confirm your email address with us when you initially signed up to Mumsnet. (If this is the case you'll probably be posting on the app, or via Google or Facebook login, because otherwise people without confirmed email addresses can't post on the main site.) Could you search your email for the mail from us that we would have sent when you first signed up, which contains a 'confirm email' link? Once you've confirmed your email address with us, please go through the password reset process again.

If you've received the link but are having trouble with it, try copying and pasting it directly into your browser - sometimes this works where clicking directly on the mail link doesn't.

If you've asked for several reset mails, it may be worth checking that you're definitely clicking on the most recently received one, as they expire after half an hour.

If this still doesn't work, it may just be the volume of people trying to reset passwords at the moment. Could you give it an hour and then ask for a fresh reset link?

If you're not receiving the reset mail at all, it may be worth double-checking that the email address you're checking is the one that you used to sign up to Mumsnet, as that's the address we will be sending the reset mail to. If you realise that your registered MN address is one you can no longer access, do let us know.

BiscuitCrumb · 12/04/2014 23:02

Phew thank goodness a thanks pear.

It is worrying though. It's promoting me to sift through accounts and change everything (of those I remember). On a separate note though how frustrating is it that you can't seem to buy a thing without registering on websites and giving a password. Lots of us use the same passwords and are obviously exposing ourselves. Why can't we just buy shit without registering.

Friedbrain · 12/04/2014 23:02

How did I manage that?

I only requested a new password?

If I set up a whole new.account (don't know how tho) how did it just choose a name for me???

AlpacaYourThings · 12/04/2014 23:02

I refuse to wear sidebollocks

Grin Grin

Maryz · 12/04/2014 23:00

This reply has been deleted

Message withdrawn at poster's request.

DieselSpillages · 12/04/2014 23:00

I've had to start afresh as email address was just one I use for signing up to stuff and I'd lost the password and couldn't get back in...Angry

It's been a right pain in the ass; but now I feel just like a mumsnet virgin Grin

This whole heartbleed thing is probably a scam by the CIA to learn all our new passwords

RowanMumsnet · 12/04/2014 22:59

@Friedbrain

I have no.idea...??????

MNHQ????

My name wasn't anything like.this.before...

I do feel like my brain is fried tho :)

Nothing in.history.... Shock

You've set up an entirely new account, it seems! If you want to mail in to [email protected] letting us know who you used to be we'll try to sort it out for you (but to be honest it may take us a day or so)

ThePearShapedToad · 12/04/2014 22:59

Nah it's ok biscuit, we were worried earlier that mnhq's replies were actually a hacker...

But they posted a picture of a certain type of bear

Y'know.....
Wink

Legit innit

Quinteszilla · 12/04/2014 22:59

Usualsuspect, it is hers now, though!

Pear, you will be reincarnated as Pearytoad, mark my words.

Maryz · 12/04/2014 22:58

This reply has been deleted

Message withdrawn at poster's request.

Swipe left for the next trending thread