Hello everyone,
The Community Tech team[1] has released a new feature: Enhanced Password Reset[2]. We developed this feature in response to the #3 wish[3] from the 2019 Community Wishlist Survey[4]. With this feature, you can prevent password reset emails from being sent unless both your username and email address are provided on Special:PasswordReset. This is an optional feature, available in the “Email options” section of Preferences. If you enable the feature, you can reduce harassment through unsolicited password reset emails. For more information, you can visit the Help:Password Reset page[5] and the project page[6].
Thank you,
Ilana Fried
Product Manager, Community Tech
[1]. https://meta.wikimedia.org/wiki/Community_Tech [2]. https://www.mediawiki.org/wiki/Help:Reset_password#I%E2%80%99m_getting_passw... [3]. https://meta.wikimedia.org/wiki/Community_Wishlist_Survey_2019/Anti-harassme... [4]. https://meta.wikimedia.org/wiki/Community_Wishlist_Survey_2019/Results [5] https://www.mediawiki.org/wiki/Help:Reset_password [6] https://meta.wikimedia.org/wiki/Community_Tech/Password_Reset_Update
A nice additional layer to the system, thankyou. Perhaps it may be possible for those users with TFA activated to also make it a requirement for a password reset requests.
On Tue, 12 May 2020 at 06:01, Ilana Fried ifried@wikimedia.org wrote:
Hello everyone,
The Community Tech team[1] has released a new feature: Enhanced Password Reset[2]. We developed this feature in response to the #3 wish[3] from the 2019 Community Wishlist Survey[4]. With this feature, you can prevent password reset emails from being sent unless both your username and email address are provided on Special:PasswordReset. This is an optional feature, available in the “Email options” section of Preferences. If you enable the feature, you can reduce harassment through unsolicited password reset emails. For more information, you can visit the Help:Password Reset page[5] and the project page[6].
Thank you,
Ilana Fried
Product Manager, Community Tech
[1]. https://meta.wikimedia.org/wiki/Community_Tech [2].
https://www.mediawiki.org/wiki/Help:Reset_password#I%E2%80%99m_getting_passw... ? [3].
https://meta.wikimedia.org/wiki/Community_Wishlist_Survey_2019/Anti-harassme... [4]. https://meta.wikimedia.org/wiki/Community_Wishlist_Survey_2019/Results [5] https://www.mediawiki.org/wiki/Help:Reset_password [6] https://meta.wikimedia.org/wiki/Community_Tech/Password_Reset_Update _______________________________________________ Wikimedia-l mailing list, guidelines at: https://meta.wikimedia.org/wiki/Mailing_lists/Guidelines and https://meta.wikimedia.org/wiki/Wikimedia-l New messages to: Wikimedia-l@lists.wikimedia.org Unsubscribe: https://lists.wikimedia.org/mailman/listinfo/wikimedia-l, mailto:wikimedia-l-request@lists.wikimedia.org?subject=unsubscribe
This is a really useful feature, thank you.
I hope https://phabricator.wikimedia.org/T153454 would also be considered sometime in the near future. It's not directly related, but related to password security.
Tldr, if I use abc123 as my password, I would get my normal admin account. But if I use xyz456 I would get it to the same account, but reduced access to power tools (useful for public computers).
Yours truly,
Rehmanhttps://en.wikipedia.org/wiki/User:Rehman
________________________________ From: Wikimedia-l wikimedia-l-bounces@lists.wikimedia.org on behalf of Ilana Fried ifried@wikimedia.org Sent: 12 May 2020 03:31 To: Wikimedia Mailing List wikimedia-l@lists.wikimedia.org Subject: [Wikimedia-l] New Feature from Community Tech: Enhanced Password Reset
Hello everyone,
The Community Tech team[1] has released a new feature: Enhanced Password Reset[2]. We developed this feature in response to the #3 wish[3] from the 2019 Community Wishlist Survey[4]. With this feature, you can prevent password reset emails from being sent unless both your username and email address are provided on Special:PasswordReset. This is an optional feature, available in the “Email options” section of Preferences. If you enable the feature, you can reduce harassment through unsolicited password reset emails. For more information, you can visit the Help:Password Reset page[5] and the project page[6].
Thank you,
Ilana Fried
Product Manager, Community Tech
[1]. https://meta.wikimedia.org/wiki/Community_Tech [2]. https://www.mediawiki.org/wiki/Help:Reset_password#I%E2%80%99m_getting_passw... [3]. https://meta.wikimedia.org/wiki/Community_Wishlist_Survey_2019/Anti-harassme... [4]. https://meta.wikimedia.org/wiki/Community_Wishlist_Survey_2019/Results [5] https://www.mediawiki.org/wiki/Help:Reset_password [6] https://meta.wikimedia.org/wiki/Community_Tech/Password_Reset_Update _______________________________________________ Wikimedia-l mailing list, guidelines at: https://meta.wikimedia.org/wiki/Mailing_lists/Guidelines and https://meta.wikimedia.org/wiki/Wikimedia-l New messages to: Wikimedia-l@lists.wikimedia.org Unsubscribe: https://lists.wikimedia.org/mailman/listinfo/wikimedia-l, mailto:wikimedia-l-request@lists.wikimedia.org?subject=unsubscribe
I am a bit confused Ilana. Could you help me understand the difference from the February announcement?
https://meta.wikimedia.org/w/index.php?title=Community_Tech/Password_Reset_U...
Med vänliga hälsningar Jan Ainali
Den tis 12 maj 2020 kl 00:01 skrev Ilana Fried ifried@wikimedia.org:
Hello everyone,
The Community Tech team[1] has released a new feature: Enhanced Password Reset[2]. We developed this feature in response to the #3 wish[3] from the 2019 Community Wishlist Survey[4]. With this feature, you can prevent password reset emails from being sent unless both your username and email address are provided on Special:PasswordReset. This is an optional feature, available in the “Email options” section of Preferences. If you enable the feature, you can reduce harassment through unsolicited password reset emails. For more information, you can visit the Help:Password Reset page[5] and the project page[6].
Thank you,
Ilana Fried
Product Manager, Community Tech
[1]. https://meta.wikimedia.org/wiki/Community_Tech [2].
https://www.mediawiki.org/wiki/Help:Reset_password#I%E2%80%99m_getting_passw... ? [3].
https://meta.wikimedia.org/wiki/Community_Wishlist_Survey_2019/Anti-harassme... [4]. https://meta.wikimedia.org/wiki/Community_Wishlist_Survey_2019/Results [5] https://www.mediawiki.org/wiki/Help:Reset_password [6] https://meta.wikimedia.org/wiki/Community_Tech/Password_Reset_Update _______________________________________________ Wikimedia-l mailing list, guidelines at: https://meta.wikimedia.org/wiki/Mailing_lists/Guidelines and https://meta.wikimedia.org/wiki/Wikimedia-l New messages to: Wikimedia-l@lists.wikimedia.org Unsubscribe: https://lists.wikimedia.org/mailman/listinfo/wikimedia-l, mailto:wikimedia-l-request@lists.wikimedia.org?subject=unsubscribe
@Jan: Hello! In February, we enabled the feature for two projects (Wiktionary and Wikivoyage). This was because we wanted to release incrementally and collect feedback before releasing to all wikis. This recent update confirms that the feature has been released to all wikis and the project is now complete. Thanks!
On Tue, May 12, 2020 at 2:57 AM Jan Ainali ainali.jan@gmail.com wrote:
I am a bit confused Ilana. Could you help me understand the difference from the February announcement?
https://meta.wikimedia.org/w/index.php?title=Community_Tech/Password_Reset_U...
Med vänliga hälsningar Jan Ainali
Den tis 12 maj 2020 kl 00:01 skrev Ilana Fried ifried@wikimedia.org:
Hello everyone,
The Community Tech team[1] has released a new feature: Enhanced Password Reset[2]. We developed this feature in response to the #3 wish[3] from
the
2019 Community Wishlist Survey[4]. With this feature, you can prevent password reset emails from being sent unless both your username and email address are provided on Special:PasswordReset. This is an optional feature, available in the “Email options” section of Preferences. If you enable
the
feature, you can reduce harassment through unsolicited password reset emails. For more information, you can visit the Help:Password Reset
page[5]
and the project page[6].
Thank you,
Ilana Fried
Product Manager, Community Tech
https://www.mediawiki.org/wiki/Help:Reset_password#I%E2%80%99m_getting_passw...
? [3].
https://meta.wikimedia.org/wiki/Community_Wishlist_Survey_2019/Anti-harassme...
[4]. https://meta.wikimedia.org/wiki/Community_Wishlist_Survey_2019/Results [5] https://www.mediawiki.org/wiki/Help:Reset_password [6] https://meta.wikimedia.org/wiki/Community_Tech/Password_Reset_Update _______________________________________________ Wikimedia-l mailing list, guidelines at: https://meta.wikimedia.org/wiki/Mailing_lists/Guidelines and https://meta.wikimedia.org/wiki/Wikimedia-l New messages to: Wikimedia-l@lists.wikimedia.org Unsubscribe: https://lists.wikimedia.org/mailman/listinfo/wikimedia-l, mailto:wikimedia-l-request@lists.wikimedia.org?subject=unsubscribe
Wikimedia-l mailing list, guidelines at: https://meta.wikimedia.org/wiki/Mailing_lists/Guidelines and https://meta.wikimedia.org/wiki/Wikimedia-l New messages to: Wikimedia-l@lists.wikimedia.org Unsubscribe: https://lists.wikimedia.org/mailman/listinfo/wikimedia-l, mailto:wikimedia-l-request@lists.wikimedia.org?subject=unsubscribe
wikimedia-l@lists.wikimedia.org