valid password rejected

[Andrew Neil]

Having been away for a few days, the forum refused to accept my login.

I know I was giving correct details, because they were coming from a password "vault".

I can't see any notification that my password had expired.

I had to do a password reset.

This has happened before - not for a long time now, but it has happened.

[Lina_DABASINSKAITE]

Hi @Andrew Neil , 

Let me check this out and get back to you! 

If anyone else had similar behavior, do let us know. 

Thanks,
Lina

[TDK]

Today when I tried to log in it said my password has expired due to security reasons and forced me to change it. Annoying. Don't remember it doing that before.

I "changed" it to the already existing password and logged in fine.

[Pavel A.]

Hmm. This can be because someone guessed your email address.

[TDK]

You're probably right. So just a coincidence that it happened same day as @Andrew Neil's issue then. Apparently you get 5 chances.

[Tesla DeLorean]

Mine explicitly said it had expired in the red text on the first attempt, so I changed it.

I think if you persist it will get less specific, but as this has happened before I was more wary.

Expired for me on Monday, as I recall.

[Tesla DeLorean]

>>I can't see any notification that my password had expired.

The red text on the first / initial fail say it has expired, and you need to reset.. subsequent ones don't look too.

Personally, I think this should be more obvious, or you should get an email explaining that it failed due to aging out. But then again, the email might look like a phishing scam. I'd vote it doesn't have any links, but just alerts that your login failed because it aged out, and that you should go back and reset. And that subsequent messages in red should reflect that the password aged out / expired, rather than you've got it wrong several times.

[Andrew Neil]

---

@Tesla DeLorean wrote:

The red text on the first / initial fail say it has expired, and you need to reset.. subsequent ones don't look too..

---

To be fair, I didn't read the red text carefully - just assumed is was the usual "wrong credentials" message.

But, if the password actually has expired, it is *** to invite the user to keep trying - it needs to go straight to the reset prompt!

---

@Tesla DeLorean wrote:

I think this should be more obvious, 

---

Absolutely!