Password change & yearly rotation
Posted: Mon Jun 14, 2010 10:29 am
Due to the break-in, I've set all forum accounts to password expired to force a password change.
Additionally, users will be prompted to change their password every 365 days.
While all forum password are encrypted, salted, etc, and there's no indication whatsoever that anyone acquired them or used them, this felt like the proper action.
Additionally, users will be prompted to change their password every 365 days.
While all forum password are encrypted, salted, etc, and there's no indication whatsoever that anyone acquired them or used them, this felt like the proper action.