Logins Broken By New Password Rules

[Andrew Neil]

There doesn't seem to be anywhere to post issues with the forum itself?

I couldn't login this morning - the site kept saying my password was wrong.

I know that it wasn't wrong, because I copy it from a password manager.

So I had to do a password reset.

There it became obvious that the password rules (length, upper/lower case, symbols, etc) have changed.

This really shouldn't just break existing passwords

:pouting_face:

At the very least, you should give a message like, "Our password rules have changed; you need to reset your password".

#UXFail

[Andrew Neil]

Ah yes - you're right!

[Pavel A.]

I see slightly different behavior at home vs. at work.

My gut feeling is that the logon stuff is served partially from CDN and there is more than one version, depending on location (cookie laws?)

-- pa

[Tesla DeLorean]

Stopped working again today

[Andrew Neil]

worked for me today...

[Tesla DeLorean]

Give it time..

ST hasn't provided any information on the periodicity of updates. Nor does one get emails related to failure attempts / lockout if someone was attacking the server.

I generated my own password reset, which I received, I haven't had others.

Failed some when on April 18th

[Andrew Neil]

Indeed.

As mine broke "recently", I guess it should last a while now if, indeed, there is some periodic expiry ...

Perhaps @brk​ could comment further - now that further info has been provided...

[Brian Kling]

Hi @Andrew Neil​ and @Community member​ I made some internal inquiries and yes as you state, our SSO is not set up for a good end-user experience :pensive_face: .

They are working on better notifications about duration of password, parameters around what characters and how many characters, etc. and notification when things are changing. Thanks for letting us know!

[Andrew Neil]

Thanks - you're welcome.

😁

[Brian Kling · Accepted solution]

I checked internally, this was implemented last week...

[Andrew Neil]

So do passwords now expire?