Active discussions

Meet the Other Phone. Child-safe in minutes.

Meet the Other Phone.
Child-safe in minutes.

Buy now

Please or to access all these features

Talk
Site stuff

Join our Innovation Panel to try new features early and help make Mumsnet better.

See all MNHQ comments on this thread

MNHQ

PLEASE READ: Forced logout and password reset

280 replies

SarahMumsnet · 19/08/2015 22:12

Hello everyone,

Our apologies again for the stress and upset of the last week, and in particular the last 24 hours - and thanks for your patience and support in helping us deal with it.

Thanks to everyone who’s raised concerns about the strength of passwords on Mumsnet. We’ve now built new code which will oblige anyone logging in to create a new, complex password that conforms to higher security standards.

In the next hour, we’re going to force all users to be logged out. Then we'll change all users' passwords so they MUST reset their password to log back in. To make absolutely certain that everyone has a new, secure password, you’ll be logged out even if you’ve already changed your password in the last two days.

We’re sorry that this is the second mass password-reset in the space of a couple of days, but now we have code in place to strengthen security, we want to implement it as soon as possible.

Please don’t worry when you’re logged out: it’s MNHQ, not the hacker, behind it.

Thanks again
MNHQ

OP posts:
ThisNameIsBetterThanMyRealOne · 20/08/2015 10:09

Is there any reason this is not stickied?

D0G · 20/08/2015 10:13

Urghh. this is all such a pain. not been on MN for ages because of some weirdo and now this.

So unsettling.

SnakeyMcBadass · 20/08/2015 10:14

I haven't had a forced reset yet.

ThisNameIsBetterThanMyRealOne · 20/08/2015 10:16

I have had a re set but took me a while to find this thread to find out what was going on.

ptumbi · 20/08/2015 10:20

I've just reset my password - but the 'box' for the first password comes up with 'use for which user name' (Ptumbi or other). I put in new password, and click ptumbi - the password ***s change from what I typed in the first box, to a shorter one (presumably my old password?)
Then of course when I input the second box, the passwords don't match.

the only way I got round it was to NOT click on 'username' choice, and input both passwords again.

TondelayaDellaVentamiglia · 20/08/2015 10:22

I had that on my phone ptumbi ....and it didn't like either option, so I had to get onto the laptop

ptumbi · 20/08/2015 10:25

I was on the laptop (don't log in on my phone or tablet, it's too annoying)

MNHQ
KateMumsnet · 20/08/2015 10:32

@ThisNameIsBetterThanMyRealOne

Is there any reason this is not stickied?

Ach, sorry ThisName - we've done that now on Active and Chat.

MNHQ
KateMumsnet · 20/08/2015 10:36

And just to let you know, JustineMumsnet has posted an update on the 'technical details' thread over here.

Here's a c&p for convenience:

"Morning all,

Here's an update of where we are at. The tech team found the hole which was accessed to capture user login data via phishing and patched it yesterday pm. Then, as you probably know, we forced another password update requiring higher-security passwords last night (once we'd rebutted a further DDoS attack).

We are undergoing full security testing by external experts over the next few days to determine if there are any other weaknesses which might be exploited. We'll update you when that process is completed.

Many thanks for your patience and understanding. The best advice remains to update your password here and any passwords used on other sites that are the same as ones you've used on Mumsnet before yesterday.

We're really sorry for the extra bother any anxiety caused."

MNHQ
RebeccaMumsnet · 20/08/2015 10:54

@magimedi

I would like to know WHY SOME OF US HAVE NOT BEEN KICKED OUT AND CAN STILL USE OLD PASSWORDS - Please.

Hi magimedi,

Everyone should have been kicked out. Tech are looking into now.
Please do reset, you shouldn't be able to log in again with your old password at all, if this has happened and you have logged out and back in again, let us know.

0pheliaBalls · 20/08/2015 10:56

Still not had a forced reset.

How do I go about getting my posting history deleted? I appreciate it's not MN's fault and that you're doing everything you can to sort this, but I think those who want their posts deleted should have that option.

Flowers to all of you working to sort out this nightmare.

IcaMorgan · 20/08/2015 10:59

I wasn't forced out but after reading this thread I logged out and in using my old password. Have changed my password now and am logged in using the new one with no problems

MNHQ
RebeccaMumsnet · 20/08/2015 11:01

@0pheliaBalls

Still not had a forced reset.

How do I go about getting my posting history deleted? I appreciate it's not MN's fault and that you're doing everything you can to sort this, but I think those who want their posts deleted should have that option.

Flowers to all of you working to sort out this nightmare.

if you email [email protected], we will take a look.

We have a team working on that now but the inbox is rather full so it may take a little while for us to get back to you. Apologies and thanks.

Dowser · 20/08/2015 11:43

As an aside, I've never understood why we haven't been able/ allowed to edit our posts. Usually it's spelling or predictive txt errors but now and again there's been times when some of us have thought that might be a bit tmi

When you have time MNHQ I'd really like to know. It's the only site ive been on that's never allowed that.

OutToGetYou · 20/08/2015 11:53

"It's the only site ive been on that's never allowed that."

How funny, I've never been on a site that has!

mejon · 20/08/2015 12:12

Bloody blinkin flip! I've just had to log in via FB as I had no other way of doing it. I can no longer access my bloody emails as I may have inadvertently changed the password but it's not recognising anything I input so I can't receive or send any. I was logged out last night at around 22.30 but decided to wait until this morning to try and get back in and assumed that when I did there'd be the choose a new password option but it's only giving me one box and the one I changed to yesterday afternoon isn't being recognised. Has everyone been sent an email with a link to reset passwords? Here is my blimmin problem as I can't get my blimming emails as I've changed my blimmin password and I can't remember what it blimmin is.

magimedi · 20/08/2015 12:14

Rebecca - I've just logged out & logged in again with the password that I changed to on Tuesday. It complies with the new rules.

MNHQ
RebeccaMumsnet · 20/08/2015 12:32

@mejon

Bloody blinkin flip! I've just had to log in via FB as I had no other way of doing it. I can no longer access my bloody emails as I may have inadvertently changed the password but it's not recognising anything I input so I can't receive or send any. I was logged out last night at around 22.30 but decided to wait until this morning to try and get back in and assumed that when I did there'd be the choose a new password option but it's only giving me one box and the one I changed to yesterday afternoon isn't being recognised. Has everyone been sent an email with a link to reset passwords? Here is my blimmin problem as I can't get my blimming emails as I've changed my blimmin password and I can't remember what it blimmin is.

We're glad you managed to get back in mejon. Hopefully you will be able to reset your password with your email provider too.

PolkadotsAndMoonbeams · 20/08/2015 12:49

I've been successfully kicked off, changed password and come back.

But now on my mobile the blue bar across the bottom with watched/I'm on etc has vanished. Has this happened to anybody else? I'm definitely logged in (I'm posting from it now!).

faustina · 20/08/2015 13:12

I'm still finding myself logged out each time I visit the site (and it wasn't me who logged myself out). I check each time that the login page is https and it is but how come I'm always logged out? It's happened three times today

I was on the list and have changed my password three times already.

MNHQ
RebeccaMumsnet · 20/08/2015 13:16

@PolkadotsAndMoonbeams

I've been successfully kicked off, changed password and come back.

But now on my mobile the blue bar across the bottom with watched/I'm on etc has vanished. Has this happened to anybody else? I'm definitely logged in (I'm posting from it now!).

Hi PolkadotsAndMoonbeams,

Would you mind starting another site stuff thread for this, it could be an unrelated issue with the mobile site. If you could post with what device and browser you are on, this would help. Thank you.

MNHQ
RebeccaMumsnet · 20/08/2015 13:18

@faustina

I'm still finding myself logged out each time I visit the site (and it wasn't me who logged myself out). I check each time that the login page is https and it is but how come I'm always logged out? It's happened three times today

I was on the list and have changed my password three times already.

Hi faustina,

What device is this on and have you been able to log back in with your new reset password since the reset or are you asked for a new password every time?

Aprildaisy · 20/08/2015 13:19

Hi the bar is there on mine on i phone.

faustina · 20/08/2015 13:23

Rebecca - I'm on my laptop. It accepts my new reset (as of this morning) password each time

faustina · 20/08/2015 13:24

it's a macbook pro

Swipe left for the next trending thread