PLEASE READ: Forced logout and password reset

[SarahMumsnet]

Hello everyone,

Our apologies again for the stress and upset of the last week, and in particular the last 24 hours - and thanks for your patience and support in helping us deal with it.

Thanks to everyone who’s raised concerns about the strength of passwords on Mumsnet. We’ve now built new code which will oblige anyone logging in to create a new, complex password that conforms to higher security standards.

In the next hour, we’re going to force all users to be logged out. Then we'll change all users' passwords so they MUST reset their password to log back in. To make absolutely certain that everyone has a new, secure password, you’ll be logged out even if you’ve already changed your password in the last two days.

We’re sorry that this is the second mass password-reset in the space of a couple of days, but now we have code in place to strengthen security, we want to implement it as soon as possible.

Please don’t worry when you’re logged out: it’s MNHQ, not the hacker, behind it.

Thanks again
MNHQ

Won't let me log in either, have had to do it via FB. And its using an old name I haven't used in years, so my history is lost, and no trace of my current user name!

I think it's just broken now. I really do.

Password changed, no problems.

Thanks MNHQ. I hope you have good supplies of gin ready, I think you have all earnt it today!

I'm a bit confused. (In fact I'm still not entirely sure I know what's ACTUALLY going on)

I was kicked off the app about 20 mins ago, so toddled off to the site to reset my password, but it didn't ask me to do a complex one?

I haven't been logged out yet.

uhtred calm down. They haven't said when they will do it. They may do it in waves because of the volume of users, eg between 23:00-1:00. Or maybe just at 22:54 for everyone. Just sit tight.

You also have to login again on all devices you used, so if you updated and reset your password last night on your phone but then used your PC later you would still have to login with your old password until MNhQ do the forced reset.

Would be useful to have this come up as an alert or something when trying to log on. I've just spent ages trying to get in with my "new" (as of this morning" password and reset it because I thought I'd forgotten it, only to discover when resetting it that it's now asking for different parameters when resetting so guessing that you've re-reset everybody all by myself.

I know you've got a lot to do, mind.

Thanks for the heads up. You're doing the right thing.

for you all at MNHQ.

Third password in 24 hours. I have no idea whether I'll ever remember this one.

My head hurts

So i got an email at lunchtime to say i was on 'the list' and i had to change my password. So i did that at lunchtime.

I have just been logged out, and told to get a password reset, i checked and found this thread, so i reckon i am ok. Anyway i have set another new password.

Am i on track?

If you are trying to reset your password on the mobile site and you get an error message saying you can't use this password because.... ,
the blank bit should read:
Password must be between 10-40 characters and include a combination of letters and at least one number or symbol. It must not be a password you have previously used.
This message appears on the desktop site but not on mobile, MNHQ

You should have all been kicked out. If you have not, please log out and you will have to reset.

Movingonup I'm perfectly calm. And I have only used one device for the last several weeks and I reset my password earlier today, as it happens. The fact is they said they would be doing a total hard reset 'in the next few minutes' about 45 mins ago, with everyone having to reset their passwords to new complex ones, I was logged out shortly after that, and I was able to log back in again without resetting my password (which is admittedly complex though possibly not complex enough). There is continually a disconnect between what they say is going to happen, what they say they are going to do and what does happen and what they do, in fact, do. Which seems to me to be a fairly good indicator that either nobody knows what they are doing or the whole thing is broken. I'm very calm about it though.

Ok I will log out then.

And this:

"Add message | Report | Message poster RebeccaMumsnet (MNHQ) Wed 19-Aug-15 23:02:35
You should have all been kicked out. If you have not, please log out and you will have to reset."

Proves my point beautifully.

Oooooo I logged in with fbook at the same time you reset....Do I need to go back out?

Nope. Not logged out. Guess I'll have to do it the long way round.

I logged out it would not let me change my password and I am back with my old password.

So I logged out AGAIN. And then logged back in again with the same password no compulsion to reset.

It worked fine as far as I could see. I got logged out, requested a password reset, got it, reset the password and got an immediate confirmation.

Thanks HQ.

Did a reset but I'll never remember the password even though it's really good!

I also can't log-in as myself unless I go via Facebook or Twitter. All MN offered me was a very old username which was associated with a long-dead email address.

Just take the site down till morning and get some sleep Mnhq, tackle this tomorrow.

Same here Uhtred. Same here. TBH this is getting to be a bit of of a ball ache - and I don't even have balls!

Still - I suppose in the grand scheme of things MNHQ are having a worse day!