Active discussions

Please or to access all these features

Talk
Site stuff

Join our Innovation Panel to try new features early and help make Mumsnet better.

See all MNHQ comments on this thread

MNHQ

PLEASE READ: Forced logout and password reset

280 replies

SarahMumsnet · 19/08/2015 22:12

Hello everyone,

Our apologies again for the stress and upset of the last week, and in particular the last 24 hours - and thanks for your patience and support in helping us deal with it.

Thanks to everyone who’s raised concerns about the strength of passwords on Mumsnet. We’ve now built new code which will oblige anyone logging in to create a new, complex password that conforms to higher security standards.

In the next hour, we’re going to force all users to be logged out. Then we'll change all users' passwords so they MUST reset their password to log back in. To make absolutely certain that everyone has a new, secure password, you’ll be logged out even if you’ve already changed your password in the last two days.

We’re sorry that this is the second mass password-reset in the space of a couple of days, but now we have code in place to strengthen security, we want to implement it as soon as possible.

Please don’t worry when you’re logged out: it’s MNHQ, not the hacker, behind it.

Thanks again
MNHQ

OP posts:
madwomanbackintheattic · 20/08/2015 06:31

AnyFucker, I went through that the first few times I tried, but it did eventually give me a confirmation email... (Well, two...)

I think it's just all a bit shaky...

I still want to know what your password was though - it caused a wee stir in the small hours Wink

OvertiredandConfused · 20/08/2015 06:27

Just done mine for third time in a few days

madwomanbackintheattic · 20/08/2015 06:27

Headless, my email change confirmation emails (both of them...) eventually went to my new email address lol, but with a time lag. Even though it was still showing as my old email address in the interim.

I still haven't been forced to reset password though. Still 9 letters no numbers/ characters yada yada...

Hey ho.

My passwords are different everywhere, so I'm not overly concerned. Does anyone know if the original usernames and passwords from the list are still working? I'm mildly tempted to try mine out of idle curiosity, but am afeared I will bugger everything again... Grin

AnyFucker · 20/08/2015 06:21

yep, I get to the confirmation page for a new email and it just says "error"

headlesslambrini · 20/08/2015 06:16

Have done mine with no trouble.

For those trying to change email, check your old email account as there should be an email from MN to confirm changes.

I've also change my name to a single letter, changed dob and removed anything else that I can.

PegsPigs · 20/08/2015 05:44

getoff are you sure they were complex enough? You wouldn't have been aware of the necessary parameters by the looks of things. Or could you set up a new account with one of those passwords but not your existing account?

MythicalKings · 20/08/2015 05:05

Mission accomplished. So sorry for those who have been targeted by these wankers.

getoffthattabletnow · 20/08/2015 04:53

I tried to change my password 3 times yesterday - didn't work.The site refused to accept them.I've been forced to do a complete new registration,new email,new everything.

TheAussieProject · 20/08/2015 04:01

I am not sure the MNHQ is aware of the email problems, so I will report some of these posts and mine, so it can be addressed

AnyFucker · 20/08/2015 03:06

I am unable to change my email too. Have tried several times.

trufflesnout · 20/08/2015 02:28

Ah. Apols. Have just RTFT. But also echoing others in that the site is not telling people what the secure password parameters are. Also, a huge majority of the leaked passwords would have passed the criteria for the new and improved password security check.

MadGrumblyGnome · 20/08/2015 02:14

Yeah madwoman same happened to me too. Solution: new email address, new account, new password, all extremely boring for any potential hackers.

trufflesnout · 20/08/2015 02:14

When you say there's a new requirement for password security - what is it? I was just told to enter a new password & did so successfully, but not once was I told if it needed to be X characters or contain X uppercase characters or X numbers.

WalfordEast · 20/08/2015 02:00

Those of you using iPhone- I don't claim to be an expert- but there is an option for blocking cookies on Iphone safari settings Go to Safari- Block Cookies- Always block. I'VE turn my do not track on too. Sorry about the garbled message- i've just spilt Dr Pepper into my keyboard and its broken my delete and enterkeys

madwomanbackintheattic · 20/08/2015 01:43

I tried to change my email address twice, Aussie. The second time I got a confirmation pop-up. But when I logged back out and in again (using the same 9 letter no number no character password that I changed to earlier) it is still showing as my original email address in 'my account'... Am I being dim? I am assuming I haven't been in the roll-out for the forced password re-set yet, and not too worried about that (the original man email warning me has yet to arrive, although I have had the confirmation email that I was on the list - no particular biggie as I was on the first thread last night and knew my name was on the list.)
I'm not sure if the change email function is down at the mo?

TheAussieProject · 20/08/2015 01:04

I have changed my password several times in the last 24 hours. The one thing I wasn't able to change was the email address saved on my account. After receiving the email from MN on the new address and confirming it on the site, I land on an error page . This one
Did this happen to anyone else?
And YES I was on the list with my old (beloved) username

PLEASE READ: Forced logout and password reset
VeganCow · 20/08/2015 00:49

No Paul, just straight talking people who dont need someone like you peddling shit. You have tried, and failed, to take advantage of the situation. People are not interested in what you have to say.

QuackersMooo · 20/08/2015 00:45

I was logged off have reset again but I have now log back on to find if lost my 1000 post per page Sad

Here mnhq CakeWine

PaulMoore · 20/08/2015 00:33

Some lovely people on here tonight.

Sigh.

cozietoesie · 20/08/2015 00:27

TakeMe

...Do people not understand the Internet? Do people not realise that if MN could reset the servers and fix this they fucking would?...

I suspect the answer to both of your questions is 'Probably Not'. (For many/most people that is.)

StrattersDairyProductPervert · 20/08/2015 00:23

I sat there with a huge pile of old newspapers, and used the cryptic crossword clues as a starting point.

It was quite good fun seeing how much I could randomise them into passwords.

cozietoesie · 20/08/2015 00:23

I was told, ducky - although after I'd failed the first time. I seem to remember the text coming up to let me know then.

VeganCow · 20/08/2015 00:22

Ducky the criteria was:

Password must be between 10-40 characters and include a combination of letters and at least one number or symbol. It must not be a password you have previously used

40 characters?? Who would choose one that long?!

TakeMeUpTheNorthMountain · 20/08/2015 00:21

Well fucking said Moving. I've been thinking it all day tbh,people whining about resetting a fucking password and crying because the hackers might have their bank details and the size of their knickers from PMs . Do people not understand the Internet? Do people not realise that if MN could reset the servers and fix this they fucking would?

JenesuispasJeffrey · 20/08/2015 00:18

I just created my longest, most complicated and most random password ever. I'm quite proud of it really...