Please or to access all these features

Site stuff

Join our Innovation Panel to try new features early and help make Mumsnet better.

See all MNHQ comments on this thread

Due to a security breach we are resetting all passwords across Mumsnet

729 replies

RebeccaMumsnet · 12/04/2014 17:32

Following the recent security breach related to Heartbleed we are reseting the passwords of all users.

On Saturday 12 April, we will remove all passwords from our system and to use the site, you'll need to reset your password by clicking on the password reset link.

Type in your email address and click the 'Request reset' button and you will receive a mail to your Mumsnet registered email account. (You will need to click on the link in the mail within 30 minutes of receiving it, without changing the device you're using i.e swapping from phone to laptop, or you'll need to request a further reset).

If you do not receive a mail, please check you spam folder. The password reset mail will come to the email you used when you first registered with Mumsnet.

If you don't receive or can't access your reset mail, please [email protected] for help.

We are very sorry for all the fuss. We want to assure you that we followed all the published steps to protect members' security as soon as we became aware of the heartbleed security risk, but it seems that the breach occurred prior to that risk becoming known.

Most importantly, if you use the same password here as elsewhere, we strongly recommend you change your password on the other sites too.

Thanks,

Justine & the MNHQ team

OP posts:
noblegiraffe · 14/04/2014 16:02

given them a few days to do it

And what would have happened in that few days? There are wind-up merchants out there who would have happily descended on MN over the weekend logging in as established posters and causing no end of mess. If you think changing your password was a hassle, try defending yourself against a load of pissy actions that your account was used for. Someone rifling through your PMs and sending all your mates 'you're a twat' type messages.

And then multiply that by a tonne of posters.

MN had no choice.

SuperFlyHigh · 14/04/2014 15:54

what happened with me?! I tried to request and rechange my password twice but it didn't work! Sad

Maryz · 14/04/2014 15:51

This reply has been deleted

Message withdrawn at poster's request.

noblegiraffe · 14/04/2014 15:46

Costa, who knows how many usernames and passwords are now public knowledge.
So what should mumsnet do? suggest that people might like to change their password, have a lot of people not bother, then have troublemakers out there with a stash of established accounts that they can log in with and cause havoc with for years to come?

So you get a bunch of people every so often finding their account has posted racist bile or trolling or whatever and dealing with the fallout.
People who troll and get rightly banned then claiming it wasn't them, it was the hackers?

It would just drag on and on. This is a one-off solution to the problem.

And apart from that, having to change MN password is a good wake-up call to those who are less security conscious or who haven't quite grasped how vulnerable they are online at the moment because of heartbleed.

sunbathe · 14/04/2014 15:40

I've emailed.

Can't access my old email, through lack of use!

So I'm hoping you can change my registered email, when you have time.

yourlittlesecret · 14/04/2014 15:27

Well I had a brief flap when I tried to do a temporary fun name change and it didn't recognise the new password that my laptop had kindly remembered for me. Then I remembered I had done it twice and found it on a scrap of paper in a safe place.

Costacoffeeplease · 14/04/2014 15:27

then you can change those passwords if you want - but to force people to change passwords on a message board site is just a bit pretentious and self-important

PirateJones · 14/04/2014 15:24

But people might use the same password and Email info for the Bank, Amazon, Paypal and so on.

usualsuspectt · 14/04/2014 15:23

This reply has been deleted

Message withdrawn at poster's request.

Costacoffeeplease · 14/04/2014 15:20

Because it's a message board not the bank of england or MI5

BIWI · 14/04/2014 15:19

Why do you think so, Costacoffeeplease?

Costacoffeeplease · 14/04/2014 15:19

Bloody ridiculous - over reaction, much?

Legologgo · 14/04/2014 14:24

mine used to be a nice small three letters

MarshaBrady · 14/04/2014 14:23

Phew did it, very fast. Didn't want to lose my name.

BertieBotts · 14/04/2014 13:49

Hey, Stercus! I didn't know you were still here. Nice to "see" you again even if you have been here all the time Grin

StercusAccidit · 14/04/2014 13:43

Oh for petes sake old username humph
Ah well
No wonder latest username wouldn't log me in, think I requested reset password a million times Confused

StercusAccidit · 14/04/2014 13:42

Just testing on app to see how my username appears

cozietoesie · 14/04/2014 13:35

There's a link at the top of the OP on this thread, Puppy, which may go some of the way to explaining things. It's been a 'stimulating' weekend for MN. Grin

FrankUnderwood · 14/04/2014 13:34

I think mine has worked now - I'm logged back in on PC (chrome) and Android app.

PuppyMonkey · 14/04/2014 13:31

I've just sorted myself out - changed my password and logged back in on laptop and phone app. Took about 30 seconds.

No idea what security prob was in first place - haven't been on MN for a while... Confused

cozietoesie · 14/04/2014 13:22

If they leave the red message link (or a version thereof) on the log in page as it is at the moment, it would be fine I'd have thought. (Maybe change it to something headed 'Password Problems?' and alter the text a little as the months go by.)

noblegiraffe · 14/04/2014 13:15

At some point your computer will log you out, or you will want to log in on a different computer.

At that point, you'll be in trouble if you haven't changed your password, as you'll need access to the password reset option, but it won't be on a handy sticky forever.

RebeccaMumsnet · 14/04/2014 13:14

Hi all,

Tech have extended the amount of time you are allowed to click on the emailed link for. You now have 48 hours but only for links sent this afternoon onwards.

Please do click to resend.

We are still ploughing through your mails, apologies it is taking some time but if you have mailed in, please hang fire and we will get back to you.

Thanks all for being so patient.

OP posts:
LIZS · 14/04/2014 13:12

So will my account go phut eventually if I don't change the pw ? Confused

poorbuthappy · 14/04/2014 13:02

So still logged in on app. Just tried logging in on PC.
Nope doesn't let me.

Swipe left for the next trending thread