Please or to access all these features

Site stuff

Join our Innovation Panel to try new features early and help make Mumsnet better.

See all MNHQ comments on this thread

Due to a security breach we are resetting all passwords across Mumsnet

729 replies

RebeccaMumsnet · 12/04/2014 17:32

Following the recent security breach related to Heartbleed we are reseting the passwords of all users.

On Saturday 12 April, we will remove all passwords from our system and to use the site, you'll need to reset your password by clicking on the password reset link.

Type in your email address and click the 'Request reset' button and you will receive a mail to your Mumsnet registered email account. (You will need to click on the link in the mail within 30 minutes of receiving it, without changing the device you're using i.e swapping from phone to laptop, or you'll need to request a further reset).

If you do not receive a mail, please check you spam folder. The password reset mail will come to the email you used when you first registered with Mumsnet.

If you don't receive or can't access your reset mail, please [email protected] for help.

We are very sorry for all the fuss. We want to assure you that we followed all the published steps to protect members' security as soon as we became aware of the heartbleed security risk, but it seems that the breach occurred prior to that risk becoming known.

Most importantly, if you use the same password here as elsewhere, we strongly recommend you change your password on the other sites too.

Thanks,

Justine & the MNHQ team

OP posts:
cazbo16 · 14/04/2014 18:11

Just changed my password. Received reset email almost instantly. Thanks.

MrsDmitriTippensKrushnic · 14/04/2014 18:10

After trying and failing to reset my password I've finally discovered that I'm using two different email addresses on here - the one I originally joined with, and the updated one that the newsletters etc go to - they both work (and go to the same place- gmail vs googlemail) but I've been trying to reset using latter and it needed the former! Might be worth checking if you're an old user and having problems as the newsletters weren't started for a while.

nannynick · 14/04/2014 18:01

Anya, I think that as the phone is already logged in, it still posts. As soon as it logs out it will need the new password.
So if someone has your username and old password, they now can't log in.

LIZS · 14/04/2014 17:54

yeah finally managed to reset and login !

AnyaKnowIt · 14/04/2014 17:49

Sorry, what I mean is should I still be able to post still using the old password?

ZingSweetCoconut · 14/04/2014 17:48

costa

sorry, but bollocks to that.

HQ did the right thing. it takes 3 mins to change a password and all is good.

noblegiraffe · 14/04/2014 17:48

We do know that there have been at least two security breaches. The guy who got Justine and a load of other posters passwords but had the decency to tell us about it, and the guy who publicly posted a different list of usernames and passwords for MN on the internet.

Changing all passwords was the only reasonable response.

PirateJones · 14/04/2014 17:46

We don't know what, if any, security breaches there have been so it all seems a bit hysterical to me

All the usernames and passwords were posted on a website.
People were signing in as MNHQ member(s).

Costacoffeeplease · 14/04/2014 17:44

Anyone seriously concerned about their posts and identity would automatically be changing passwords, I would have thought, but to force everyone to do so is heavy handed. We don't know what, if any, security breaches there have been so it all seems a bit hysterical to me

RandallFloyd · 14/04/2014 17:24

How marvellously narc Grin

Seriously though, I'm very relieved you found them. I came out in a cold sweat for you!

ZingSweetCoconut · 14/04/2014 17:20

ok, I'm totally off the thread, but I searched my name in "People" on Pinterest and find myself and the pins I thought I lost!Smile

I don't know how to actually incorporate them into my new "account" so for now I'm following myself.
Confused

Grin Grin Grin Grin Grin Grin Grin

BertieBotts · 14/04/2014 17:15

If you log out on the phone you'd need to use the new password. It's the same account on both devices.

AnyaKnowIt · 14/04/2014 17:08

I've changed my password on my tablet but not on my phone.

I'm posting this from my phone as I haven't needed to re enter any passwords.

ZingSweetCoconut · 14/04/2014 17:02

I do remember one quote though

"Just chuck it in the fuck it bucket and move on"

Grin
MarshaBrady · 14/04/2014 16:55

I would not be happy either!

RandallFloyd · 14/04/2014 16:55

You lost all your pins Shock Shock Shock Shock Shock

MarshaBrady · 14/04/2014 16:51

Oh really Zing? How very annoying.

Itsfab · 14/04/2014 16:49

Now I am confused and frustrated. Asked for password reset email. I can only log in with my old password Hmm. What has the point of that? I have already tried to change my password the usual way and it wouldn't accept that either.

Itsfab · 14/04/2014 16:39

Bummer, took me ages to think of one and I can't remember them sometimes. Hence same one for everything until I realised that was stupid.

ZingSweetCoconut · 14/04/2014 16:29

I had to change my Pinterest password too and lost all my fucking pins Angry (over a thousand).

now if I could just remember all of them....

ophiotaurus · 14/04/2014 16:25

Bump

SuperFlyHigh · 14/04/2014 16:10

Any - I'm happy they did what they did (and I swear I was good beforehand) but it makes one feel a bit policed.

having said that a friend of mine recently joined MN because "I was on there" and I was sort of Confused in case she saw my user name and then threads etc... paranoia!

AnyFucker · 14/04/2014 16:08

fab, yes I think you do

AnyFucker · 14/04/2014 16:08

I am happy HQ did what they did. (I have a tiny little feeling they should have done it sooner but hey ho)

Some of us take our anonymity on here very seriously (for various reasons) and if that was compromised (through no fault of my own) I would not be at all impressed.

Itsfab · 14/04/2014 16:03

I changed my password a few days before your resetting. Do I need to change it again now?