Pale Moon forum

I wanted to log into the forum today. But before that I got the request to change my password. My password was long with 36 different characters. I am interested in why this request came

policy change: viewtopic.php?f=17&t=29323

This has just happened to me as well.
I don't get it, why? Doesn't seem related to the link as that sounded like one-off thing.

This quote from the linked post

(you will need to choose a new password on occasion)

doesn't sound like a one-off time thing to me..

LuftWafflePilot wrote: ↑

2024-05-13, 11:32

This has just happened to me as well.
I don't get it, why? Doesn't seem related to the link as that sounded like one-off thing.

I thought I was pretty clear in that post:

I'll enforce a password change regime (you will need to choose a new password on occasion)

The fact that it happened for many people at once the first time (and clustered this time) is simply because "on occasion" is a set number of days.

Oh. I missed the "on occasion" part.

Michaell wrote: ↑

2023-10-03, 03:03

policy change: viewtopic.php?f=17&t=29323

And the resulting discussion threads:
viewtopic.php?f=66&t=29324#p235727
viewtopic.php?f=65&t=29368

This morning before departure from holidays I was prompted to change my forum password (which I did, on the laptop, with a little strangeness). Now I got home and I had to do the same change on the desktop (which I did editing my "Saved Logins" - which I suppose it driven by add-on Classic Password Editor 1.1.2.

The "strangeness" was that I got the form to change the password, changed it, it told me the change was successful, but prompted me again to change (this could be due to another strangeness, see below) ... "Saved Logins" stored the new pwd only for one of my two entries. I fiddled around a bit, finally I pressed "Reset" on the pw change form and was in and OK.

Now the other strangeness. I am subscribed to three phpBB forums. For all of them I usually tick the box "remember me" (or whatever is called in each forum). Usually this has the effect that I remain logged in after a switch off (I ripristinate my session with Session Manager 0.8.1.1.14), except that occasionally I am requested to log in again (e..g. after installing a new PM version). This I consider physiological.
There is however a difference between the PM forum and the other two. In the other two if I click on the username box, I am offered the login username, and if I select it the password is loaded automatically. For the PM forum I have to click on the password box, select one of the two usernames offered, THEN click on the username box and do the same. I am not sure whether that is normal behaviour of the PM forum, or is due to soime anomaly in my saved logins.

I fact I have two (actually three) entries stored. One is for http://forum.palemoon.org, has my username and and old password last changed in 2015 (I suppose I could get rid of it). The other two are for https://forum.palemoon.org. In one the username is my username, and in the other the username is my e-mail. I do not know how the two were created (do they correspond to two entries in the PM site DB ?), whether they cause the "strangenesses" and whether they should be cleared at my end or at the forum end.

I had an 18 character password. Since the words "on occasion" was used, I have now changed to a 12 character password.

Speaking just for myself, I see no need for a long password when the "change your password" is going to be more frequent in time from here on out.

It's not going to be "more frequent". The interval is the same as it has been, which is more than a year between changes.

Also as stated before: if you don't want to change it because you are confident it's secure, then temporarily change it to something else and then immediately change it back.

This is the best compromise we can do here with current levels of security. It's either change the password occasionally (a minor inconvenience once in a blue moon, literally) or we can move to requiring 2FA for every single login (a nuisance every time you visit and way over the top for a forum).

Lucio Chiappetti wrote: ↑

2024-07-28, 14:46

if I select it the password is loaded automatically. For the PM forum I have to click on the password box, select one of the two usernames offered, THEN click on the username box and do the same. I am not sure whether that is normal behaviour of the PM forum, or is due to soime anomaly in my saved logins.

I fact I have two (actually three) entries stored. One is for http://forum.palemoon.org, has my username and and old password last changed in 2015 (I suppose I could get rid of it). The other two are for https://forum.palemoon.org. In one the username is my username, and in the other the username is my e-mail.

You cannot log in using your e-mail. having both entries will be the cause of your confusion in this case. I suggest you delete the old one and the one with your email address, leaving just the username one.

It worked out Okay in the end for me; when I initially received the newest "Change Password" request I could not get around to it at the time and just didn't visit the forum.
But just a few minutes ago I was ready to provide a new pass...I opened my PM tab to enter new pass, and it asks me for my master pass (different from my PM pass) I enter the master pass and Voila' I'm in!
So now I'll have to remember that for the next time? or did I just get lucky.

Moonchild wrote: ↑

2024-07-28, 16:38

You cannot log in using your e-mail. having both entries will be the cause of your confusion in this case. I suggest you delete the old one and the one with your email address, leaving just the username one.

Thanks, I confirm that this way I get the normal and complete prompt (for forum login).