Please or to access all these features

Site stuff

Join our Innovation Panel to try new features early and help make Mumsnet better.

See all MNHQ comments on this thread

Due to a security breach we are resetting all passwords across Mumsnet

729 replies

RebeccaMumsnet · 12/04/2014 17:32

Following the recent security breach related to Heartbleed we are reseting the passwords of all users.

On Saturday 12 April, we will remove all passwords from our system and to use the site, you'll need to reset your password by clicking on the password reset link.

Type in your email address and click the 'Request reset' button and you will receive a mail to your Mumsnet registered email account. (You will need to click on the link in the mail within 30 minutes of receiving it, without changing the device you're using i.e swapping from phone to laptop, or you'll need to request a further reset).

If you do not receive a mail, please check you spam folder. The password reset mail will come to the email you used when you first registered with Mumsnet.

If you don't receive or can't access your reset mail, please [email protected] for help.

We are very sorry for all the fuss. We want to assure you that we followed all the published steps to protect members' security as soon as we became aware of the heartbleed security risk, but it seems that the breach occurred prior to that risk becoming known.

Most importantly, if you use the same password here as elsewhere, we strongly recommend you change your password on the other sites too.

Thanks,

Justine & the MNHQ team

OP posts:
RowanMumsnet · 12/04/2014 22:07

@Quinteszilla

How long after clicking the link until I receive my password reset?

It should come through fairly quickly.

Just going to post up here a list of things to check - apologies if you've already done so but this covers most of the bases we think:

If you've asked for a reset but got a blank message or a message asking you to confirm your email address, it sounds as though you didn't confirm your email address with us when you initially signed up to Mumsnet. (If this is the case you'll probably be posting on the app, or via Google or Facebook login, because otherwise people without confirmed email addresses can't post on the site.) Could you search your email for the mail from us that we would have sent when you first signed up, which contains a 'confirm email' link? Once you've confirmed your email address with us, please go through the password reset process again.

If you've received the link but are having trouble with it, try copying and pasting it directly into your browser - sometimes this works where clicking directly on the mail link doesn't.

If you've asked for several reset mails, it may be worth checking that you're definitely clicking on the most recently received one, as they expire after half an hour.

If you're not receiving the reset mail at all, it may be worth double-checking that the email address you're checking is the one that you used to sign up to Mumsnet, as that's the address we will be sending the reset mail to. If you realise that your registered MN address is one you can no longer access, do let us know.

It's also worth checking your spam folder as well.

If none of this works, it may just be the volume of people trying to reset passwords at the moment. Could you give it an hour and then ask for a fresh reset link?

RowanMumsnet · 12/04/2014 22:03

@HanSolo

MNHQ, please could you answer a question?

Our usernames and passwords have been published online, is that correct? But is that purely the current username, or all our old ones too?

We honestly don't know exactly what's out there and wouldn't want to give false reassurance. Sorry.

Blondieminx · 12/04/2014 22:00

Just popping on to say I followed the link and reset with no probs.

And the thing that I learned today? That M&S make Honeycomb baileys, which sounds amazing Grin

Quinteszilla · 12/04/2014 21:59

How long after clicking the link until I receive my password reset?

eatyourveg · 12/04/2014 21:59

Trying to change the password on my account, type in my old password which I kept having to use to log in with yesterday but its now saying it doesn't recognise it! Confused How can I change it if I don't know what it is to start with?

HanSolo · 12/04/2014 21:59

MNHQ, please could you answer a question?

Our usernames and passwords have been published online, is that correct? But is that purely the current username, or all our old ones too?

InspirationFailed · 12/04/2014 21:55

Thank you :-)

comicsansisevil · 12/04/2014 21:55

This reply has been deleted

Message withdrawn at poster's request.

RowanMumsnet · 12/04/2014 21:55

@InspirationFailed

I'm posting using the mobile site, I logged out and tried to log in again and the only way I can do it is to go via google. It hasn't asked me for any password at all. I've emailed.

We've replied to you now Inspiration

InspirationFailed · 12/04/2014 21:40

I'm posting using the mobile site, I logged out and tried to log in again and the only way I can do it is to go via google. It hasn't asked me for any password at all. I've emailed.

coffeeinbed · 12/04/2014 21:36

strange.

NearTheWindymill · 12/04/2014 21:35

So does this mean our personal identities could be out there then?

NearTheWindymill · 12/04/2014 21:34

So, is this why we were all being logged out then?

NearTheWindymill · 12/04/2014 21:33

From my internet provider so wondering if this is viral. Obviously not going to say who my internet provider is on here. Interner provider password not provider - sorry typed fast.

RowanMumsnet · 12/04/2014 21:32

Inspiration, are you posting using the app?

RowanMumsnet · 12/04/2014 21:26

Ah we've just had a sudden rush of emails saying the password reset mail either isn't arriving or is blank when it does arrive - we're getting Tech to take a look now.

HarveySchlumpfenburger · 12/04/2014 21:23

I've not used the google log in, and I'm no expert but wouldn't it use your google password to log you in not a specific MN one? I don't know if it's under MN's control.

coffeeinbed · 12/04/2014 21:23

A message from who, Windymill?

Legologgo · 12/04/2014 21:23

Mnhq. If you're emailing me wrt anything my hotmail is out. So try twitter.
0

NearTheWindymill · 12/04/2014 21:21

Beyond credit cards what else could be exposed do you think?

Legologgo · 12/04/2014 21:21

I've had this password since 2003. Sniff

NearTheWindymill · 12/04/2014 21:20

I had a message to change internet provider too. I'm going to cancel my credit card I think.

RowanMumsnet · 12/04/2014 21:20

sorry x-post Inspiration - can you email in to [email protected]?

RowanMumsnet · 12/04/2014 21:19

@InspirationFailed

I can't change my password.

I clicked the link to reset

Change the password

Try to log in and get the 'unverified account' message and it tells me to click a link in the confirmation email.

But there is no link in it, so I click to resend the confirmation email and get this message (on the photo)

I'm assuming I'm logged in now under my old password (I clicked to log in with google and it logged me in without me having to put any password in)

Hmm that's odd - anyone else finding that the Google log-in is allowing you to circumvent the password reset?

Sorry Inspiration, your photo didn't upload

trace2 · 12/04/2014 21:18

Thank you x

Swipe left for the next trending thread