PLEASE READ: Forced logout and password reset

[SarahMumsnet]

Hello everyone,

Our apologies again for the stress and upset of the last week, and in particular the last 24 hours - and thanks for your patience and support in helping us deal with it.

Thanks to everyone who’s raised concerns about the strength of passwords on Mumsnet. We’ve now built new code which will oblige anyone logging in to create a new, complex password that conforms to higher security standards.

In the next hour, we’re going to force all users to be logged out. Then we'll change all users' passwords so they MUST reset their password to log back in. To make absolutely certain that everyone has a new, secure password, you’ll be logged out even if you’ve already changed your password in the last two days.

We’re sorry that this is the second mass password-reset in the space of a couple of days, but now we have code in place to strengthen security, we want to implement it as soon as possible.

Please don’t worry when you’re logged out: it’s MNHQ, not the hacker, behind it.

Thanks again
MNHQ

Finally managed to do a new password

After requesting maybe 8 resets

As all the passwords I chose weren't allowed

Maybe need to put on a sticky thread stating all passwords must have letters and numbers and another character/sign like /)£&?!

I think I had about 8/9 reset attempts too

I agree with Blondes, telling us the password requirements would have been a help. I kept getting told my password wasn't suitable due to the following reasons - but none were given. Really frustrating

But I made it back at last ????

include mix of capital and lower case letters too

Annoying wasn't it 'red' as then kept having to ask for new link to be sent

Think my problem was that it wasn't 10 characters

Got this in an email from mn today - would have been more useful 2 days ago

You'll need to create a more robust password that meet these requirements:
10 characters

A mix of letters and at least one symbol or number
Not a previous password (only applies to the last two you've used)

It is best NOT to have a recognisable name or a number.

It can be so easy to guess passwords based on peoples names and birthdays.