We’re updating Daz Security Settings!

DAZ_JacobDAZ_Jacob Posts: 21
edited May 2020 in The Commons

As part of our ongoing commitment to keep your information secure, we’ve been implementing a number of security updates over the last few weeks.  Most of those updates have happened in the  background across all our programs including our website, DazCentral, DIM, DazConnect, and Studio.

One change we’ve installed is that Daz now requires at least seven (7) characters for each user password, which better protects your individual account and helps keep your information secure.  Note, there are no other requirements for that password.

While this large security update overhaul only affected certain users in a small capacity, it also marked the first time that some Daz users have ever changed their password! For good measure, we recommend you change your password at least once every five years or so :).

We’re also offering you a special deal to thank you for participating in our increased password security: take 15% off up to 5 items* of your choosing using coupon code: SECURE-IT

Thank you for being a Daz User, and for helping us keep your account secure!

 

*Offer excludes New Releases.

*Usable once per customer.

*Limited time offer - coupon works until 12:00 midnight MDT, Friday 5/22.

Post edited by DAZ_Jacob on
«13

Comments

  • lana_lasslana_lass Posts: 520

    Hi Jacob! Thanks so much for your work on this for all of us :) It is great to know as Daz expands and grows the security side of things is being kept up to speed.

     

    Also, big thank you for the coupon code! Is there a time limit on the code we need to be aware of? :)

     

    Again, thanks so much to you and the rest of the team. I hope you're all keeping safe!

  • chris-2599934chris-2599934 Posts: 1,843

    One of the effects of this change is that if your password is shorter than 7 characters, DIM will not allow you to log in (the website seems quite happy to continue accepting your short password). Once you change your password to comply with the new rules, DIM will work normally.

  • DAZ_JacobDAZ_Jacob Posts: 21
    lana_lass said:
    Is there a time limit on the code we need to be aware of? :)

    Great Q, thanks for reminding me!  You should use this coupon before midnight, 12:00 MDT on Friday, the 22nd.

  • kenshaw011267kenshaw011267 Posts: 3,805

    Any chance the forum will stop logging people out so often? 

  • L'AdairL'Adair Posts: 9,479

    I don't mind changing my password, but the last time I tried, the software wouldn't accept my username. Apparently I got real lucky some five or so years ago, getting the apostrophe in my username. Now the software throws a tizzy fit.

    Fortunately, my current password is longer than 7 characters…!

  • AtiAti Posts: 9,143
    L'Adair said:

    I don't mind changing my password, but the last time I tried, the software wouldn't accept my username. Apparently I got real lucky some five or so years ago, getting the apostrophe in my username. Now the software throws a tizzy fit.

    Fortunately, my current password is longer than 7 characters…!

    Apostrophes are a nightmare when it comes to databases... :D

  • evacynevacyn Posts: 975

    Looks like the coupon doesn't work with Fast Grab either :/

  • Charlie JudgeCharlie Judge Posts: 12,912
    evacyn said:

    Looks like the coupon doesn't work with Fast Grab either :/

    Also it doesn't seem to work with the $1.99 items in today's sale: https://www.daz3d.com/plethora-of-items-for-your-library#index=0&order=popular^1&filtered=1

  • RangerRickRangerRick Posts: 291
    Ati said:
    L'Adair said:

    I don't mind changing my password, but the last time I tried, the software wouldn't accept my username. Apparently I got real lucky some five or so years ago, getting the apostrophe in my username. Now the software throws a tizzy fit.

    Fortunately, my current password is longer than 7 characters…!

    Apostrophes are a nightmare when it comes to databases... :D

     

    https://xkcd.com/327/

  • Seven193Seven193 Posts: 1,111

    How does Daz know how many characters my password has?  That sort of implies our passwords are stored in plain text.

  • y3kmany3kman Posts: 802

    Any chance the forum will stop logging people out so often? 

    Same with the store.

  • TaozTaoz Posts: 9,979
    DAZ_Jacob said:

     

    One change we’ve installed is that Daz now requires at least seven (7) characters for each user password, which better protects your individual account and helps keep your information secure.  Note, there are no other requirements for that password.

    Great, then I can continue using "password".  cheeky

  • NovicaNovica Posts: 23,905
    Taoz said:

    Great, then I can continue using "password".  cheeky

    Ah, then my passwerd is safe, too. But I may change it to passwurd.

  • TaozTaoz Posts: 9,979
    edited May 2020
    Dave230 said:

    How does Daz know how many characters my password has?  That sort of implies our passwords are stored in plain text.

    Just count them when you create it, and deny creating any password shorter than seven characters.  After that, all that is needed is that the hash matches, the lenght of the password is irrelevant.

    ETA: in this case though, they have probably just added code that checks the password length at login also, and rejects those whose password is less than 7 chars, in order to make them update their password.  No need to store the number of characters either, here.

    Post edited by Taoz on
  • Richard HaseltineRichard Haseltine Posts: 102,890
    Dave230 said:

    How does Daz know how many characters my password has?  That sort of implies our passwords are stored in plain text.

    Daz doesn't, and they are not.

  • SevrinSevrin Posts: 6,310
    edited May 2020

    If you really want people to use safe passwords, make it a discount of 1% per character in our passwords. devil

    Post edited by Sevrin on
  • vagansvagans Posts: 422
    Sevrin said:

    If you really want people to use safe passwords, make it a discount of 1% per character in our passwords. devil

    haha that's a great idea

  • ed3Ded3D Posts: 2,303

    + _ seems,  alright then  _

  • TaozTaoz Posts: 9,979
    ed3D said:

    + _ seems,  alright then  _

    I think you can use almost any character, I have included these for years in my (rather long) DAZ password: /%)"= 

    But there are still many dinosaur sites out there who allow only alphanumeric characters and only a small number of them.

  • Ron KnightsRon Knights Posts: 1,805

    I use 1Password on my Mac & PC, my iPhone & iPad, It's interesting that not every web site follows the same rules about what is acceptable. I usually have 1Password generate a new secure password, Sometimes a web site won't accept the password, and I need to do some editing. It's good to have 1Password store all my passwords.

  • jjmainorjjmainor Posts: 490
    edited May 2020
    Neat coupon. Thanks.
    Post edited by jjmainor on
  • WendyLuvsCatzWendyLuvsCatz Posts: 38,625
    edited May 2020
    L'Adair said:

    I don't mind changing my password, but the last time I tried, the software wouldn't accept my username. Apparently I got real lucky some five or so years ago, getting the apostrophe in my username. Now the software throws a tizzy fit.

    Fortunately, my current password is longer than 7 characters…!

    I used to be wendy❤️catz then one day that was no longer useable 

    Post edited by WendyLuvsCatz on
  • James_HJames_H Posts: 1,046
    Sevrin said:

    If you really want people to use safe passwords, make it a discount of 1% per character in our passwords. devil

    Brilliant. You should be on the World Bank! A policy I would vote for.

  • FishtalesFishtales Posts: 6,162

    I use long passwords as a general rule just by the way I create them to remember easily :)

    What I don't understand is sites requiring longer and longer passwords for security when the longer the password the harder to remember and the more chance of people writing them down or creating memos  on their devices so they don't forget them :)

  • TaozTaoz Posts: 9,979
    Fishtales said:

    I use long passwords as a general rule just by the way I create them to remember easily :)

    What I don't understand is sites requiring longer and longer passwords for security when the longer the password the harder to remember and the more chance of people writing them down or creating memos  on their devices so they don't forget them :)

    Maybe they expect that people are using password managers, then you only need to remember the master password.  I have for over 15 years, it makes things much simpler and safer, just press ctrl+a to log in on almost any site.

  • scorpioscorpio Posts: 8,484
    DAZ_Jacob said:

    As part of our ongoing commitment to keep your information secure, we’ve been implementing a number of security updates over the last few weeks.  Most of those updates have happened in the  background across all our programs including our website, DazCentral, DIM, DazConnect, and Studio.

    One change we’ve installed is that Daz now requires at least seven (7) characters for each user password, which better protects your individual account and helps keep your information secure.  Note, there are no other requirements for that password.

    While this large security update overhaul only affected certain users in a small capacity, it also marked the first time that some Daz users have ever changed their password! For good measure, we recommend you change your password at least once every five years or so :).

    We’re also offering you a special deal to thank you for participating in our increased password security: take 15% off up to 5 items* of your choosing using coupon code: SECURE-IT

    Thank you for being a Daz User, and for helping us keep your account secure!

     

    *Offer excludes New Releases.

    *Usable once per customer.

    *Limited time offer - coupon works until 12:00 midnight MDT, Friday 5/22.

    Thanks, but this information would have been nice when several of us were running around trying to figure out why we couldn't log into DIM several days ago

  • Hurdy3DHurdy3D Posts: 1,058

    Are we forced to change the password?

    What if we do nothing?

  • TaozTaoz Posts: 9,979
    gerster said:

    Are we forced to change the password?

    What if we do nothing?

    If you can't log in with the old one because it's too short, you're forced to yes.  Otherwise not (my old one works fine).

  • Hurdy3DHurdy3D Posts: 1,058
    edited May 2020
    Taoz said:
    gerster said:

    Are we forced to change the password?

    What if we do nothing?

    If you can't log in with the old one because it's too short, you're forced to yes.  Otherwise not (my old one works fine).

    well, I can still login.

    edit: oh... just seeing that it is already long enough ;) Just wondering why I get on my account page the message "* Due to recent security updates, passwords must be at least 7 characters. Be sure to update yours!" Seems to be a generic one.

    Post edited by Hurdy3D on
  • WendyLuvsCatzWendyLuvsCatz Posts: 38,625
    gerster said:
    Taoz said:
    gerster said:

    Are we forced to change the password?

    What if we do nothing?

    If you can't log in with the old one because it's too short, you're forced to yes.  Otherwise not (my old one works fine).

    well, I can still login.

    edit: oh... just seeing that it is already long enough ;) Just wondering why I get on my account page the message "* Due to recent security updates, passwords must be at least 7 characters. Be sure to update yours!" Seems to be a generic one.

    yeah made me check my Google passwords as thought I must have changed it

    it auto fills 

    is still the last longish one I recall though

Sign In or Register to comment.