PLEASE READ: Forced logout and password reset

[SarahMumsnet]

Hello everyone,

Our apologies again for the stress and upset of the last week, and in particular the last 24 hours - and thanks for your patience and support in helping us deal with it.

Thanks to everyone who’s raised concerns about the strength of passwords on Mumsnet. We’ve now built new code which will oblige anyone logging in to create a new, complex password that conforms to higher security standards.

In the next hour, we’re going to force all users to be logged out. Then we'll change all users' passwords so they MUST reset their password to log back in. To make absolutely certain that everyone has a new, secure password, you’ll be logged out even if you’ve already changed your password in the last two days.

We’re sorry that this is the second mass password-reset in the space of a couple of days, but now we have code in place to strengthen security, we want to implement it as soon as possible.

Please don’t worry when you’re logged out: it’s MNHQ, not the hacker, behind it.

Thanks again
MNHQ

@faustina

Rebecca - I'm on my laptop. It accepts my new reset (as of this morning) password each time

What browser please faustina? Firefox, Safari ?

And at what point do you get logged out? mid-session or when idle?

Will do

Sorry, just double checked and I actually reset my password on Tuesday evening - not changed since then.

Can I double check something? I was forcibly logged out last night and as I was on the app, decided to wait until I got on a computer today to change my password. I done it but want to check I've followed the right process - was I meant to just request a password reset and then click on the link in the resulting email from [email protected] to do it?

Sorry if this has been explained somewhere - I've read lots of threads and can't find the answer. My suspicious mind is now in overdrive and I want to check I've followed the right procedure.

I'm using Safari, and I think it logged me out when I was idle (although it's been idle since I last posted on here and I don't seem to have been logged out this time

RebeccaMumsnet sorry - me again. I have now been logged off the site, but when I go to look back in it is not asking me to reset my password......I know you said to do it anyway. Do I click on the link for I have forgotten my password?
In other news DadSec have tweeted that their domain has been suspended - but that they have "more shit coming"

faustina, when you logged in, did you have the "Keep me logged in" option ticked? If not, it seems to be timing out quickly if idle.

Just so everybody knows, there are a few programs you can use to store your passwords and only have to remember a master password (for people who can only remember one). Not quite as risky as having the same password for websites and the associated email accounts.

catz I always have that box ticked - and these past few days have double checked

That didn't help then, did it,faustina? Sorry!
I just know I usually have it ticked but it wasn't after I reset my password.

Depeche - could you list a couple of those please?

@MeAndTheMajor

Can I double check something? I was forcibly logged out last night and as I was on the app, decided to wait until I got on a computer today to change my password. I done it but want to check I've followed the right process - was I meant to just request a password reset and then click on the link in the resulting email from [email protected] to do it?

Sorry if this has been explained somewhere - I've read lots of threads and can't find the answer. My suspicious mind is now in overdrive and I want to check I've followed the right procedure.

Hi MeAndTheMajor - yes that's exactly right. Do let us know if you have any trouble.

@camperdine

I have still not had a forced reset.

Hi camperdine - we'd suggest changing your password yourself on your account, even if you haven't been forced a reset.

@shopafrolic

RebeccaMumsnet sorry - me again. I have now been logged off the site, but when I go to look back in it is not asking me to reset my password......I know you said to do it anyway. Do I click on the link for I have forgotten my password? In other news DadSec have tweeted that their domain has been suspended - but that they have "more shit coming"

Hi shopafrolic - you can either click on forgotten my password or follow this link. Shout if you have any trouble.

@faustina

I'm using Safari, and I think it logged me out when I was idle (although it's been idle since I last posted on here and I don't seem to have been logged out this time

Hi faustina - it may be because you had been idle for a certain amount of time. Hopefully you won't have any further trouble, but if you do, please do let us know and we'll have a look.

Thanks BeccaMumsnet [tea] nearly time surely?

I've done a reset by asking for the email link. And have logged in with new password.

There is no longer the yellow triangle warning on the log in page, but the yrl was OK

Thank you Becca - will do!

@DixieNormas

I've just been chucked out again but when it asked for password reset it didn't have the warning thingy that's been coming up and it was green instead of the yellow it's been the last few times?

I had another window open and it's let me back on without resetting my password

Hi DixieNormas - we've let Tech know about this and they're looking into things, but they do think it's all fine.

@shopafrolic

Thanks BeccaMumsnet [tea] nearly time surely?

Hi shopafrolic - where's the smiley?!

@DixieNormas

I didn't bother password changing a giant and it's let me back on anyway

Hi again DixieNormas - we would recommend changing your password if you haven't done so today. We'll look into why you're being logged off.