PLEASE READ: Forced logout and password reset

[SarahMumsnet]

Hello everyone,

Our apologies again for the stress and upset of the last week, and in particular the last 24 hours - and thanks for your patience and support in helping us deal with it.

Thanks to everyone who’s raised concerns about the strength of passwords on Mumsnet. We’ve now built new code which will oblige anyone logging in to create a new, complex password that conforms to higher security standards.

In the next hour, we’re going to force all users to be logged out. Then we'll change all users' passwords so they MUST reset their password to log back in. To make absolutely certain that everyone has a new, secure password, you’ll be logged out even if you’ve already changed your password in the last two days.

We’re sorry that this is the second mass password-reset in the space of a couple of days, but now we have code in place to strengthen security, we want to implement it as soon as possible.

Please don’t worry when you’re logged out: it’s MNHQ, not the hacker, behind it.

Thanks again
MNHQ

Have done mine with no trouble.

For those trying to change email, check your old email account as there should be an email from MN to confirm changes.

I've also change my name to a single letter, changed dob and removed anything else that I can.

yep, I get to the confirmation page for a new email and it just says "error"

Headless, my email change confirmation emails (both of them...) eventually went to my new email address lol, but with a time lag. Even though it was still showing as my old email address in the interim.

I still haven't been forced to reset password though. Still 9 letters no numbers/ characters yada yada...

Hey ho.

My passwords are different everywhere, so I'm not overly concerned. Does anyone know if the original usernames and passwords from the list are still working? I'm mildly tempted to try mine out of idle curiosity, but am afeared I will bugger everything again...

Just done mine for third time in a few days

AnyFucker, I went through that the first few times I tried, but it did eventually give me a confirmation email... (Well, two...)

I think it's just all a bit shaky...

I still want to know what your password was though - it caused a wee stir in the small hours

my password caused a small stir ?

I have had a few now. Was it ILoveBigCock123 ?

How do you know that trufflesnout? It's not as if Mumsnet accounts have any truly sensitive information (bank details etc) so why would people have automatically used complex passwords? If they have been members a long time they might have been using an old password for many years, long before advice was routinely given for complexity, the site has not previously had any requirements for passwords nor made regular requests to change them.

I have no idea what is going on - don't even know my username now!! Have managed to login using my email address so am posting here to find out what username I have!

Wow! Not that I don't like the scintillating choice of Member957064, but how can I change this without having to change my password for the fourth time?!!!

Well - I have changed my password again but it has taken me several goes to log in. Can't do it from the log in page - I have to click on "threads I'm on" then click on the link that comes up.

I have no idea if that is ok or not.

I am not on fb or other social media so have to type in password.

I hope I don't have to change password again as I am running out of ideas.

I wasn't logged out, so I just did it all manually now.

Can you make it clearer to people that's what they should do- I had to search through this thread to find out (and I'd had an email last night telling me you were going to do it so I was on the lookout).

Lol AF I haven't seen the list. You weren't the only one and no one was reposting for obv reasons, just periodic and The mnhq passwords inc Tech were subject to some commentary. I think being an A you may have been at the top of the list? Just some unexpected insight into posters' psyches
Including mine lol. Your big cock would have made an interesting companion to my banana but I'm not sure whose psyche would be judged more damaged by that...

"I tried to change my password 3 times yesterday - didn't work.The site refused to accept them"

Long password, with at least one capital letter and one number. If it's not accepted, it didn't have all of the above.

Error message should have said so but I'm guessing MNHQ have a few things on their minds at the moment.

pardon my ignorance but what is this going to achieve? since the hacker didn't guess our passwords, what does it matter how complex they are?

Hello, I made it back...

Where's the gin?

I was one of the 3,000 leaked on Twitter. I changed my password yesterday AM, and then again via the link in the email MNHQ sent out.
Last night they said there would be another forced password reset where they would log us out of the site and we would have to change our password before being allowed back in again. This hasn't happened yet. I've logged out and back in on all devices - no forced reset. Any ideas? I assume I am protected but unsure.....

Not sure if relevant to any of this but I just did my password reset. Then clicked talk...I was logged in, a banner came up on my phone saying 'welcome to mumsnet, log in here or join here to continue'

Never seen this before and I clicked elsewhere on my screen to continue. I was still logged in.

I've had no email and still not been forced out, will do it myself after a coffee.

I'm back in, password changed, no problems. and to all MNHQ. Perhaps it's just the night owls who were skipped?

I have tried 50BoiledCabbagesShovedUpYourArse but it said that one was taken.

(only kidding - I already have mine but loads of people are having trouble)

Can someone from MNHQ PLEASE state what the new password parameters are?

Thanks

I have asked for the password reset email but it hasn't come through. How long does it take?

Would be good to have an update from MNHQ seems alot of weird things still happening!

Remember to screen shot and copy and paste URLs to send to tech if you spot anything weird or new.

I reset my password, did a fancy password generated one and everything and now I can't log in

I've tried to reset my password again but the emails aren't coming through.

I've had to re-register, all the colours are wrong, I don't normally have that disgusting green for the op's posts! Whoever thought that colour was a good idea

I only got the first email at midnight (the one about the 11 accounts so a few days old)

There is no reset email this time, you just log in using a new password, which meets the criteria - I do not know what the criteria are and no one appears to have specified but mine has a mix of upper and lower plus some numerals. It's also long.

It's this that hasn't happened for me.....
In the next hour, we’re going to force all users to be logged out. Then we'll change all users' passwords so they MUST reset their password to log back in. To make absolutely certain that everyone has a new, secure password, you’ll be logged out even if you’ve already changed your password in the last two days.