Please or to access all these features

Site stuff

Join our Innovation Panel to try new features early and help make Mumsnet better.

See all MNHQ comments on this thread

Due to a security breach we are resetting all passwords across Mumsnet

729 replies

RebeccaMumsnet · 12/04/2014 17:32

Following the recent security breach related to Heartbleed we are reseting the passwords of all users.

On Saturday 12 April, we will remove all passwords from our system and to use the site, you'll need to reset your password by clicking on the password reset link.

Type in your email address and click the 'Request reset' button and you will receive a mail to your Mumsnet registered email account. (You will need to click on the link in the mail within 30 minutes of receiving it, without changing the device you're using i.e swapping from phone to laptop, or you'll need to request a further reset).

If you do not receive a mail, please check you spam folder. The password reset mail will come to the email you used when you first registered with Mumsnet.

If you don't receive or can't access your reset mail, please [email protected] for help.

We are very sorry for all the fuss. We want to assure you that we followed all the published steps to protect members' security as soon as we became aware of the heartbleed security risk, but it seems that the breach occurred prior to that risk becoming known.

Most importantly, if you use the same password here as elsewhere, we strongly recommend you change your password on the other sites too.

Thanks,

Justine & the MNHQ team

OP posts:
doobedoobedoo · 12/04/2014 19:58

Changed my password, but I tried to use a number of symbols in it such as $%@_#+ and I wasn't allowed to. I could only use letters and numbers.

Letters and numbers alone make for very weak passwords. Upper & lower case help (assuming MN software recognises the difference? - I haven't tested that out), but they are still weak if people use real words.

Any chance that Tech could do something to allow other characters in passwords?

slithytove · 12/04/2014 19:58

Mine is still automatically logging me in on my old password?

noblegiraffe · 12/04/2014 19:56

So there is a list? What was on it? Just usernames and passwords or also email addresses?

If email addresses, then people who use the same password for their email address need to be changing that ASAP too. Anyone could be noseying through their stuff.

ItsAllGoingToBeFine · 12/04/2014 19:56

We are sending a message to everyone on our database with the exception of those who've specifically asked to receive no email from us; that will go out soon, probably before the end of today

TBH I think you should send to everybody, opt out or not.

Fuck! I hope a list of usernames and passwords haven't been put on the net!

It has and was posted earlier. So if you use the same logon info across more than one site you need to change those too.

RowanMumsnet · 12/04/2014 19:56

@RandallFloyd

Just realised I only have virtual gin I'm afraid. If you want actual booze I have a bottle of cider and some honeycomb baileys

Do I look fussy?

Honeycomb Baileys, mmmmm

GiddyUpCowboy · 12/04/2014 19:53

or at least those who have the link go and pm those of us mentioned on the other site please so we know we have been compromised.

LocalEditorMerton · 12/04/2014 19:52

Thanks, RowanMumsnet! Just thought you may be able to press one key and the message would go across all of them....Blush shows non-techy side

LackaDAISYcal · 12/04/2014 19:52

ooops Blush thanks for flagging that up though everythingisawesome!

GiddyUpCowboy · 12/04/2014 19:52

can you pm it to me please?

HarveySchlumpfenburger · 12/04/2014 19:51

The link to the list of logins was posted earlier but got deleted.

Not sure it's a good idea to post it again. It might push Rowan over the edge.

RandallFloyd · 12/04/2014 19:51

I also have a bottle of sparkling rosé of that's any help?

mamicar · 12/04/2014 19:51

already forgot my password Grin

BeattieBow · 12/04/2014 19:51

oh dear I am being a bit dense I think.

I saw this thread and changed my password. And now I just got the email through asking me to change my password. Do I have to change it again?

And also, I have passwords on hundreds of websites and I can't even remember them all (I do, ahem, a bit of internet shopping). do I have to change my password on all of them?

Legologgo · 12/04/2014 19:49

shit my hotmail is buggered atm

mnhq can you not just do mine for me looks up through lashes

AryaOfHouseSnark · 12/04/2014 19:48

Right, I have changed MN password, got a verification email and
Changed passwords for everything else.
Does that mean that peace and equilibrium have been restored ? Can I
get pissed have a glass of wine, knowing that all is well and good ?

RandallFloyd · 12/04/2014 19:47

Just realised I only have virtual gin I'm afraid.
If you want actual booze I have a bottle of cider and some honeycomb baileys

IamInvisible · 12/04/2014 19:47

Fuck! I hope a list of usernames and passwords haven't been put on the net!

RowanMumsnet · 12/04/2014 19:46

@LocalEditorMerton

Any value in posting thread across all the Local sites too HQ?

That's a good point but sadly it's not something we can easily do I don't think - we'll take a look

LocalEditorMerton · 12/04/2014 19:44

Any value in posting thread across all the Local sites too HQ?

GiddyUpCowboy · 12/04/2014 19:44

where is the list of logins? can we have a link please?

cozietoesie · 12/04/2014 19:44

You're all doing well, Rowan. No HQ swearing or anything like that so far!

cozietoesie · 12/04/2014 19:42

x post. Grin

cozietoesie · 12/04/2014 19:41

I've actually got an unopened bottle of gin downstairs together with a case of Schweppes Tonic. I'm guessing the tonic is redundant tonight?

RowanMumsnet · 12/04/2014 19:41

@RandallFloyd

More Rowan?

About four pints please

bantamgirl · 12/04/2014 19:39

So, I was having a thick moment. Realised I would have been using e-mail number 1 (for this account) and trying to log into username2 with password 1. Changed username 2's password and still wont let me in on PC or app. I can get onto the app with Username 1 but I want to use username 2....Oh well, I'll try again in a few days, at least I can get in.