Password update prompt

System

Well thats half an hour of my life i wont get back.:mad: Ive got a spare account too.

Roland_Sausage

Lomcevak wrote: »

Dear Andrea, you're making people reset passwords with an insecure form

Does it matter? It's only a forum. It's not a financial account, or email account that could be used to reset other accounts.

Apart from maybe for spamming purposes, nobody is interested in hacking anyone's forum account.

keith969

MSE_Andrea wrote: »

Hi everyone

As eagle-eyed regular forum members have noticed already, we're asking you all to update your passwords. You should be doing this regularly for your own peace of mind.

Some hadn't been updated for some time and we want to make sure you change them regularly.

Thanks for your patience. Have a great weekend.

Andrea

Can you confirm or deny whether this site has been hacked and member's passwords stolen?

It's unusual to require a password change after 12 years without a good reason.

forgotmyname

We shall see because i have chosen the same password which worked.

mac.d

MSE_Andrea wrote: »

As eagle-eyed regular forum members have noticed already, we're asking you all to update your passwords. You should be doing this regularly for your own peace of mind.

Some hadn't been updated for some time and we want to make sure you change them regularly.

Would have been sensible to announce this in advance so people know it was coming, and not after the event. And considering its not secure anyway, completely pointless to force everyone to change passwords, so no peace of mind in changing it regularly. :question:

Elona_2

I had to change my user name after thirteen years and got a message today that after eleven days I had to change my password.

I kept entering the right thing and the forum would not accept it!!!! Eventually I managed to sort things out after a very frustrating half hour.

What with disappearing threads, apostrophe errors and being kicked off the forum I am getting paranoid.

steppevos

The website is not even using https for the password change page. So all passwords (old and new) are send in plain text over the internet and we can keep using our existing password. So this is a complete non-action.
I think that MoneySavingExpert may have serious problems with the upcoming Data Protection Legislations coming into force in May this year :T.
Well, at least it made me aware that MSE doesn't take security very serious.

neilmcl

MSE_Andrea wrote: »

Hi everyone

As eagle-eyed regular forum members have noticed already, we're asking you all to update your passwords. You should be doing this regularly for your own peace of mind.

Some hadn't been updated for some time and we want to make sure you change them regularly.

Thanks for your patience. Have a great weekend.

Andrea

Worth noting that your system allows the old password to be reused.

Tigsteroonie

Only 4061 days since I last changed my password for here!!

MSE Andrea please would you respond to the question as to Why Now? It rather suggests that you've been hacked, else you would have issued a warning that this was going to be needed shortly.

Prinzessilein

Just had to change mine....about 6 months after my last password change....why????...I could understand if everyone has to change after, say, 5 years....but why EVERYONE today - even if they have changed passwords recently...makes no sense!