PLEASE READ: Forced logout and password reset

[SarahMumsnet]

Hello everyone,

Our apologies again for the stress and upset of the last week, and in particular the last 24 hours - and thanks for your patience and support in helping us deal with it.

Thanks to everyone who’s raised concerns about the strength of passwords on Mumsnet. We’ve now built new code which will oblige anyone logging in to create a new, complex password that conforms to higher security standards.

In the next hour, we’re going to force all users to be logged out. Then we'll change all users' passwords so they MUST reset their password to log back in. To make absolutely certain that everyone has a new, secure password, you’ll be logged out even if you’ve already changed your password in the last two days.

We’re sorry that this is the second mass password-reset in the space of a couple of days, but now we have code in place to strengthen security, we want to implement it as soon as possible.

Please don’t worry when you’re logged out: it’s MNHQ, not the hacker, behind it.

Thanks again
MNHQ

Oh bugger. Passwords and me are a bad mix at the best if times. I just don't have a good enough memory to cope with more and more resets these days.

I am off to sit in a darkened room and mourn the passing of the good memory I had in my youth.

He's posted a phone number to contact him on his twitter account. Hope the police will do what tehy will with it

I have a sticky note app on my encrypted phone and I store this sort of non financial password on that.

I haven't been kicked out yet. Are we still waiting for some waves?

Err, I've still not been logged out.

PS - I have logged out but the old password worked again

Is that an app for Windows phone? I need something, but if I go off and look then I am sure I will have been kicked out again for another reset.

I logged out as wasn't kicked out (as advised by mnhq on here earlier) but it's allowed me to log back in with my old password. How do I reset?

I was meant to be going to sleep but was just lying here wondering what was going on so thought I'd try!

Thanks catz, I was getting that message and couldn't work out why it wouldn't accept my new password attempts

This is ridiculous, logged out and back in with my details from this mornings reset. I requested a password change and the page crashes 3 times! So back again with the usual log in.

I'm logging in with Facebook for the time being and will leave it before changing my password again until tomorrow I think.

I've not been kicked out yet either.

I had assumed they just hadn't done it yet but it seems Rebecca is saying they have?

I'm going to wait a bit longer and it still no forced reset I'll log off and go to bed and sort it in the morning. Could be Tech is still tinkering? Or whatever the proper term is.

You're welcome Snozzberry

twirly, log out then click reset password on the login page.

Topseyt mine is an android phone - app free on Google play store.

This is getting ridiculous. Surely the tech guys can boot this random guy to the kerb?! We've already had to reset passwords and now have to again because of a single hacker? I'm not meaning to be a dick, and I understand that this is far more frustrating for MNHQ than the rest of us, but I'm now just fed up.

also logged out and no reset requested, just to add to the list. :)

Keep up the good work Mumsnet Admin, thank you for keeping us informed and our data safe. For those that are moaning, changing a password twice in one day isn't the end of the world, come on.

I've changed passwords three times today.
And name changed.
And on different email addy.
Starting from scratch.

It might be useful if MNHQ could explain what the new password rules are.

Thanks catz, ive just done that. Hoping they don't now boot me off as that password was my bestest ever and I will never remember another

Just logged out too and then logged back in again with same password

No forced reset

It worked fine for me too. I requested a reset, changed my password and logged back in.

My password is not 'complex' though

shadowfax
Password must be between 10-40 characters and include a combination of letters and at least one number or symbol. It must not be a password you have previously used.

MNHQ, people are logging in with their previous passwords and with non-complex passwords, judging by recent posts on more than one thread. What's going one? I thought you were enforcing brand new and complex passwords, but apparently not, so what's the point?