Upcoming changes to the login system

[Brian]

I'm considering updating the forum to the latest version, which is a complete revamp of the current software, and has been in development for a number of years.
I'm currently trying to raise the $600+ that would be needed to get someone to assist, as it is a huge update with lots of new features and benefits. 
Frankly, we'll have to do it eventually anyways, as this version 4 won't be supported forever, and it will allow us to improve a lot of things.

That aside, I don't have a date yet when we will do it. But there is one thing that I need to warn all members about.
Most forums nowadays, across most platforms, are moving away from logging in using your username. This is because usernames are visible to everyone, and it is a security risk when hackers etc use various methods to run common passwords etc.
The modern convention is to have everyone log in with their registered email address, and their usual password.
This is because emails are not visible and are far more secure.

So I am putting this out there now, so that people can start transitioning from logging in using their username, to logging in with their email address.
YES...I know how many people can't remember their emails they used, or have changed it by now. Hence why I'm giving everyone plenty of warning to see what your email is here, so you can use to to login. Or update it if you like.

Your forum email address is in your profile. You can find it here: https://www.militaria.co.za/nmb/settings/
Make sure you know what it is, and probably best to make sure you know what your password is, or reset it if you don't.
For now, you can log in with your username OR your email address. But eventually that username won't be a login method. Your username will display as it does currently, no changes there

So please start transitioning over, and post here if you have any questions.

[Kiipu]

Logged out and tried the email address instead of a user name.  No problems encountered at all.  One is just substituting an email address instead of a user name and then entering the same password as usual.  Strongly recommend everyone give it a try now versus later.

 

I would also suggest having another member's email address at hand in case of a problem.  They can contact one of the moderators on your behalf if there is a glitch.

[Brian]

Thank you Thomas. 
Yes, not much of a change, but apparently the software developers consider it a vital change, as hackers are getting more and more advanced and using AI etc. 

So I'm just getting this part started well in advance, to minimize the number of people that will inevitably be confused.

[eternal_newbie]

1 hour ago, Brian said:

Yes, not much of a change, but apparently the software developers consider it a vital change, as hackers are getting more and more advanced and using AI etc. 

 

Yup. Part of the process of brute forcing a password is figuring out the username that each password unlocks. If you can't log in with your username (which is visible to everyone) that effectively gives you two passwords that they need to crack to get in. Which is why you shouldn't ever share the email address you use to log into the NMB in here; if you must put an email address for people to contact you, use a business or personal one that isn't linked to your NMB account.