Active discussions

Meet the Other Phone. Flexible and made to last.

Meet the Other Phone.
Flexible and made to last.

Buy now

Please or to access all these features

Talk
Site stuff

Join our Innovation Panel to try new features early and help make Mumsnet better.

See all MNHQ comments on this thread

MNHQ

ATTENTION ALL: Changes to the login process are coming.

94 replies

BeccaMumsnet · 15/10/2015 12:33

Hi all,

We wanted to let you know in advance about a change we're making to the login page on Mumsnet, which will take effect from Monday.

As you'll all know unless you've been living under a rock for the last two months we've been looking very carefully at our site security in the wake of the hacking attacks in August. We've done a lot of work behind the scenes, but one of public changes we've decided to make is to remove the option of logging in using your username.

On a forum on which usernames are visible to the public, the wisdom now is that it's imprudent to allow people to log in with their usernames, on the grounds that a determined attacker could take their name and employ a piece of software to crack their password (this is known as a brute force attack). It's far more secure to require people to log in using their email addresses, since a hacker would have no way of knowing that.

From Monday on, therefore, we're going to remove the option of logging in using your nickname and password, and ask you to sign in using your email and password instead.

Alternatively, if you prefer, you can still log in via Facebook or Google+.

If any of this doesn't make sense, or you've any further questions, please do ask here or email us on [email protected]

Thanks all
MNHQ

OP posts:
SoupDragon · 15/10/2015 15:47

Does this mean that, in the event of another phishing attack, the hackers will be able to harvest our email addresses as well as our usernames and passwords?

Do not use the same password, or a similar one, for your email as for anywhere else.

Most websites have you log in with an email address - do you worry about those?

GreyAndGoldInTheMeadow · 15/10/2015 15:50

I was one who was on the list but this didn't worry me too much as I don't actually care if someone logs into my mumsnet account and the information is no use for any other site. Had it been my email address that they had got in combination with my password would be much more worrying for me (even though I don't use the same password elsewhere) since the hacking I've changed MN to a email which is solely for here so I guess it doesn't matter, but can't help the feeling this change may make people's MN accounts more secure but potentially make users other accounts more vulnerable in the event of another hack.

Kacie123 · 15/10/2015 15:53

If your details are already out there, that sucks ... But for most people it's "safer" because then random mischief-makers can't take your username from MN posts and then run a bunch of standard passwords against it in an attempt to log in.

EcclefechanTart · 15/10/2015 16:00

Most websites have you log in with an email address - do you worry about those?

No, but then I've never seen another website have their home page replaced by a phishing page before!

diddl · 15/10/2015 16:01

It's not really that much of a concern to me eitherGrey.

It's an email account that I only use for mumsnet.

I have no profile page set up, so there's no info about me.

The password that was in use than was only for this site.

So now that I have a new all singing all dancing password for here, the annoying thing is that I won't be able to log in as I always have!

kinkytoes · 15/10/2015 16:10

The Internet isn't 100% safe anyway. I guess it's a risk we all have to live with, however we log in.

icelollycraving · 15/10/2015 16:27

Quick question as I'm not very techy. If I log in via FB does it show that I'm on FB or does it compromise my privacy?

Girlwhowearsglasses · 15/10/2015 16:30

But are you going to have a 'log out of all devices' option?

29PaddingtonSt · 15/10/2015 16:37

When you log in via Facebook does it show up in your newsfeed or anywhere on Facebook?

mrspremise · 15/10/2015 16:42

I've just altered the email address I'll have to use to log in to one that isn't my full name as well!

BeckerLleytonNever · 15/10/2015 16:45

so hackers can get your email address yet that's better?????? Hmm

thought usernames were more secure.

ThatsDissapointing · 15/10/2015 16:56

I use this internet password book for my passwords. I keep it in my safe so it's very safe. I used to use password apps but I prefer to use a book as I can keep extra information in it. I use it as well as Apples Keychain.

I got the book from Amazon for £5.99 . It's got a paper cover on it in the photo but it's just a black notebook.

ATTENTION ALL: Changes to the login process are coming.
MNHQ
BeccaMumsnet · 15/10/2015 16:59

Hi all - just to answer a few questions that have cropped up so far:

  1. You won't be forced to log-out. You will only be aware of the change when you log-out manually and try to log back in again.
  1. We can never guarantee there won't be a phishing attempt, however we have undertaken substantial additional security measures to reduce the chances.
  1. We're working on a 'disconnect app' option and will be adding a 'log out of all devices' option very soon.
  1. Facebook log-in is secure - we only take the minimum amount of info we can and you can disconnect from us at any time. We don't appear on your newsfeed just because you've used Facebook log-in on the site.

A few of you have mentioned changing your email address ahead of the log-in changes. This is absolutely fine - please do go ahead via your account settings if you'd like to do this.

If you have any further questions, please do keep posting or email us at [email protected]. Thanks all.

OP posts:
diddl · 15/10/2015 17:13

How do you change your email address?

MNHQ
BeccaMumsnet · 15/10/2015 17:25

Hi diddl - to change you email address, go to the purple 'My Mumsnet' box at the top right of the page. As you hover over it, a menu will appear. Click on 'My Account'.

On this page, click in the box with your email address (top of the page), remove the older one and type in the new one. Don't forget to save your changes at the bottom of the page. You'll need to know your current password to make changes on this page.

OP posts:
Tiptops · 15/10/2015 17:48

MNHQ My password was leaked by the hackers. I changed all the passwords I could think of where I'd used the same one, but a little while ago I had an email from Tesco club card saying someone had logged into my account with the correct email and password, but they suspected it wasn't me. No idea how they detected it, but I then realised I'd used the leaked password on that account and I'd forgotten to change it. So, for those whose password were leaked, were our emails also leaked?

Sorry, been meaning to ask but didn't seem worth starting a new thread.

Anastasie · 15/10/2015 18:01

Does this mean you have finally fixed the change-email glitch that wouldn't acknowledge the confirmation?

AnyFucker · 15/10/2015 18:03

Does this mean you have finally fixed the change-email glitch that wouldn't acknowledge the confirmation?

Nope

Kacie123 · 15/10/2015 18:04

Just tried changing mine with no luck.

Anastasie · 15/10/2015 18:08

Oh I thought it was just me and a 'sorry, we have explored everything and can't work it out, it must be just YOU'

Anastasie · 15/10/2015 18:08

AHEM

Dowser · 15/10/2015 18:09

Oh no!!! The last time was hard enough and I won't be at home with good Internet access on Monday ...well all week actually.

Id better say my goodbyes now :-(

TennesseeMountainPointOfView · 15/10/2015 19:25

When you change your email address, it doesn't look like it's worked to start with, but if you check your email, you should have a message asking you to click the link to confirm you requested the change.
If you click the confirm button, it opens a new window with your account details, showing the new email address.
I've just done it, and it worked first time.

AnyFucker · 15/10/2015 19:39

Yes, Tennessee

I have done that process several times

To no avail

IWasHereBeforeTheHack · 15/10/2015 19:41

Thats - so, you paid £6 for a notebook just to write passwords in? Confused