PLEASE READ: Forced logout and password reset

[SarahMumsnet]

Hello everyone,

Our apologies again for the stress and upset of the last week, and in particular the last 24 hours - and thanks for your patience and support in helping us deal with it.

Thanks to everyone who’s raised concerns about the strength of passwords on Mumsnet. We’ve now built new code which will oblige anyone logging in to create a new, complex password that conforms to higher security standards.

In the next hour, we’re going to force all users to be logged out. Then we'll change all users' passwords so they MUST reset their password to log back in. To make absolutely certain that everyone has a new, secure password, you’ll be logged out even if you’ve already changed your password in the last two days.

We’re sorry that this is the second mass password-reset in the space of a couple of days, but now we have code in place to strengthen security, we want to implement it as soon as possible.

Please don’t worry when you’re logged out: it’s MNHQ, not the hacker, behind it.

Thanks again
MNHQ

It took 3 goes to reset. I didn't get an email when I tried from my phone but did immediately when I did it from the computer.

Off to try iPad and then giving up.

It took me about 5 goes to pick a password that was accepted as helpfully the error message didn't specify what was wrong with it. I was trying all the usual tips like capital letter, number and a special character and still got errors.

Phew. Took me a while to create an acceptable new password. Kept saying "failed for following reasons: " and no reasons listed. Based on trial and error, I am guessing it's to do with special characters. When I took it out, leaving just uppercase, lowercase and numbers, it worked. If you're reading this thread looking for answers, like I was a few minutes ago, I hope that helps?

Marsha were you forced out and then had to reset or have you just changed your password yourself without prompting?

Just to add - my new password is over 10 characters long, with capitals, numbers and special characters.

hth those struggling.

vegan cow's post at 0.22 am explains password requirements.

Shop forced out. And then thought I may never get back in for a few goes. But did when off the phone.

I have logged in with the password I changed to on Tuesday 18th (first forced password change).

It does fulfill the criteria of 10 - 40 characters + numbers/symbols & the url seemed OK.

Never before have I wanted to be forced off MN so badly

Ha! There are others I think who have not been forced out, not sure how many but spotted a few posts.

Why on earth didn't this message get emailed? What's the point of posting it when you're logging everyone out? Shambles

MNHQ. You really, really need to sort something out for those of us who use the app to get notified about the password reset. Especially when it's so hard to trust the desktop version at the moment.

I did FB you to say I kept getting expired link when I tried to change my password (I know you're busy, I don't expect immediate response) And obviously as each link is only valid for one time use, I had to go through the palaver again (and again, and again) to get a link which would accept a password.

Incidentally, the password which was successfully accepted is an old (but not necessarily immediately previous) password. I use many other sites where this would not be possible. I'd not even be able to use repeating characters.

Please inform us, when we go to change our password, what the NEW PARAMETERS are. Because so far, I can't tell there is anything new. I can use letters, I can use numbers, I can use the same character consecutively. I can use old passwords.

What I can't do is get mumsnet to accept a suitably long enough password which combines them with symbols to make it more secure. I presume it's something like 'between 6-12 characters'. Not even a need for a capital or at least one number/symbol.

It would be nice to be told.

Not sure what to do now. Sit tight with my new password I did yesterday (totally different to the one leaked on Twitter and a mix of characters, numbers etc) but doesn't fit the new password criteria. Or change it to the new criteria and risk then being forced out and having to change again.
I need a coffee and / or a lie down. Poor MNHQ I feel for you I really do but some more info would be very helpful.......

Ive had to create a new account and keep logging back in but hey ho, it gave me the chance to upgrade my username

It's all a pain in the arse but it sure as shit isn't going to stop me.

MNHQ I salute your efforts against this twatfuckery.

I changed everything yesterday anyway but I still haven't been forced out, so seems pointless to change my password again by doing a reset myself, better to wait to be booted out so I don't have to do it twice.

If it helps - RebeccaMumsnet on another thread has told me to sit tight and they will release more info shortly.

One of the other LE's is more awake than me today.
We were both still logged in when this appeared. Both on phones, mine and iphone not sure of hers.

Thanks shop

What a bloody ball ache for HQ.

Coted'azur the last 2 passwords had letters and numbers.Still kept on getting the error message from Mn.I'm apparently not the only one this has happened to.

God, that was bloody painstaking!

If only I didn't like it so much here, I'd have given up.

PW reset, new username too. I'm good to go!

I still haven't been logged out and I just get expired link when I try and change my password myself.

"Coted'azur the last 2 passwords had letters and numbers.Still kept on getting the error message from Mn"

You also need capital letters.

There is another twitter account cropped up with apparently a phone number to ring the hacker...

@dad_sec