Active discussions

Please or to access all these features

Talk
Site stuff

Join our Innovation Panel to try new features early and help make Mumsnet better.

See all MNHQ comments on this thread

MNHQ

PLEASE READ: Forced logout and password reset

280 replies

SarahMumsnet · 19/08/2015 22:12

Hello everyone,

Our apologies again for the stress and upset of the last week, and in particular the last 24 hours - and thanks for your patience and support in helping us deal with it.

Thanks to everyone who’s raised concerns about the strength of passwords on Mumsnet. We’ve now built new code which will oblige anyone logging in to create a new, complex password that conforms to higher security standards.

In the next hour, we’re going to force all users to be logged out. Then we'll change all users' passwords so they MUST reset their password to log back in. To make absolutely certain that everyone has a new, secure password, you’ll be logged out even if you’ve already changed your password in the last two days.

We’re sorry that this is the second mass password-reset in the space of a couple of days, but now we have code in place to strengthen security, we want to implement it as soon as possible.

Please don’t worry when you’re logged out: it’s MNHQ, not the hacker, behind it.

Thanks again
MNHQ

OP posts:
shopafrolic · 20/08/2015 08:10

Marsha were you forced out and then had to reset or have you just changed your password yourself without prompting?

honeysucklejasmine · 20/08/2015 08:01

Phew. Took me a while to create an acceptable new password. Kept saying "failed for following reasons: " and no reasons listed. Based on trial and error, I am guessing it's to do with special characters. When I took it out, leaving just uppercase, lowercase and numbers, it worked. If you're reading this thread looking for answers, like I was a few minutes ago, I hope that helps?

stripytees · 20/08/2015 08:01

It took me about 5 goes to pick a password that was accepted as helpfully the error message didn't specify what was wrong with it. I was trying all the usual tips like capital letter, number and a special character and still got errors.

shopafrolic · 20/08/2015 08:00

Off to try iPad and then giving up.

MarshaBrady · 20/08/2015 07:59

It took 3 goes to reset. I didn't get an email when I tried from my phone but did immediately when I did it from the computer.

shopafrolic · 20/08/2015 07:58

It's this that hasn't happened for me.....
In the next hour, we’re going to force all users to be logged out. Then we'll change all users' passwords so they MUST reset their password to log back in. To make absolutely certain that everyone has a new, secure password, you’ll be logged out even if you’ve already changed your password in the last two days.

StephanieBeacham · 20/08/2015 07:57

I only got the first email at midnight (the one about the 11 accounts so a few days old)

There is no reset email this time, you just log in using a new password, which meets the criteria - I do not know what the criteria are and no one appears to have specified but mine has a mix of upper and lower plus some numerals. It's also long.

Doyouthinkshesaurus · 20/08/2015 07:49

I reset my password, did a fancy password generated one and everything and now I can't log inSad

I've tried to reset my password again but the emails aren't coming through.

I've had to re-register, all the colours are wrong, I don't normally have that disgusting green for the op's posts! Whoever thought that colour was a good ideaHmm

headlesslambrini · 20/08/2015 07:49

Would be good to have an update from MNHQ seems alot of weird things still happening!

Remember to screen shot and copy and paste URLs to send to tech if you spot anything weird or new.

backonthewagon · 20/08/2015 07:48

I have asked for the password reset email but it hasn't come through. How long does it take?

StephanieBeacham · 20/08/2015 07:45

I have tried 50BoiledCabbagesShovedUpYourArse but it said that one was taken.

(only kidding - I already have mine but loads of people are having trouble)

Can someone from MNHQ PLEASE state what the new password parameters are?

Thanks Flowers

NoTechnologicalBreakdown · 20/08/2015 07:45

I'm back in, password changed, no problems. Brew and Cake to all MNHQ. Perhaps it's just the night owls who were skipped?

AllThatGlistensIs · 20/08/2015 07:40

I've had no email and still not been forced out, will do it myself after a coffee.

LocalEditorEssex · 20/08/2015 07:39

Not sure if relevant to any of this but I just did my password reset. Then clicked talk...I was logged in, a banner came up on my phone saying 'welcome to mumsnet, log in here or join here to continue'

Never seen this before and I clicked elsewhere on my screen to continue. I was still logged in.

shopafrolic · 20/08/2015 07:39

I was one of the 3,000 leaked on Twitter. I changed my password yesterday AM, and then again via the link in the email MNHQ sent out.
Last night they said there would be another forced password reset where they would log us out of the site and we would have to change our password before being allowed back in again. This hasn't happened yet. I've logged out and back in on all devices - no forced reset. Any ideas? I assume I am protected but unsure.....

MrsWembley · 20/08/2015 07:36

Hello, I made it back...

Where's the gin?

SpaggyBollocks · 20/08/2015 07:25

pardon my ignorance but what is this going to achieve? since the hacker didn't guess our passwords, what does it matter how complex they are?

CoteDAzur · 20/08/2015 07:13

"I tried to change my password 3 times yesterday - didn't work.The site refused to accept them"

Long password, with at least one capital letter and one number. If it's not accepted, it didn't have all of the above.

Error message should have said so but I'm guessing MNHQ have a few things on their minds at the moment.

madwomanbackintheattic · 20/08/2015 07:07

Lol AF I haven't seen the list. You weren't the only one and no one was reposting for obv reasons, just periodic and Shock The mnhq passwords inc Tech were subject to some commentary. I think being an A you may have been at the top of the list? Just some unexpected insight into posters' psyches Grin
Including mine lol. Your big cock would have made an interesting companion to my banana but I'm not sure whose psyche would be judged more damaged by that...

Barbeasty · 20/08/2015 07:06

I wasn't logged out, so I just did it all manually now.

Can you make it clearer to people that's what they should do- I had to search through this thread to find out (and I'd had an email last night telling me you were going to do it so I was on the lookout).

3littlefrogs · 20/08/2015 07:06

Well - I have changed my password again but it has taken me several goes to log in. Can't do it from the log in page - I have to click on "threads I'm on" then click on the link that comes up.

I have no idea if that is ok or not.

I am not on fb or other social media so have to type in password.

I hope I don't have to change password again as I am running out of ideas.

Member957064 · 20/08/2015 07:02

Wow! Not that I don't like the scintillating choice of Member957064, but how can I change this without having to change my password for the fourth time?!!!

Member957064 · 20/08/2015 06:59

I have no idea what is going on - don't even know my username now!! Have managed to login using my email address so am posting here to find out what username I have!

nooka · 20/08/2015 06:52

How do you know that trufflesnout? It's not as if Mumsnet accounts have any truly sensitive information (bank details etc) so why would people have automatically used complex passwords? If they have been members a long time they might have been using an old password for many years, long before advice was routinely given for complexity, the site has not previously had any requirements for passwords nor made regular requests to change them.

AnyFucker · 20/08/2015 06:49

my password caused a small stir ? Confused

I have had a few now. Was it ILoveBigCock123 ?