We’re updating Daz Security Settings!

As part of our ongoing commitment to keep your information secure, we’ve been implementing a number of security updates over the last few weeks. Most of those updates have happened in the background across all our programs including our website, DazCentral, DIM, DazConnect, and Studio.
One change we’ve installed is that Daz now requires at least seven (7) characters for each user password, which better protects your individual account and helps keep your information secure. Note, there are no other requirements for that password.
While this large security update overhaul only affected certain users in a small capacity, it also marked the first time that some Daz users have ever changed their password! For good measure, we recommend you change your password at least once every five years or so :).
We’re also offering you a special deal to thank you for participating in our increased password security: take 15% off up to 5 items* of your choosing using coupon code: SECURE-IT
Thank you for being a Daz User, and for helping us keep your account secure!
*Offer excludes New Releases.
*Usable once per customer.
*Limited time offer - coupon works until 12:00 midnight MDT, Friday 5/22.
Comments
Hi Jacob! Thanks so much for your work on this for all of us :) It is great to know as Daz expands and grows the security side of things is being kept up to speed.
Also, big thank you for the coupon code! Is there a time limit on the code we need to be aware of? :)
Again, thanks so much to you and the rest of the team. I hope you're all keeping safe!
One of the effects of this change is that if your password is shorter than 7 characters, DIM will not allow you to log in (the website seems quite happy to continue accepting your short password). Once you change your password to comply with the new rules, DIM will work normally.
Great Q, thanks for reminding me! You should use this coupon before midnight, 12:00 MDT on Friday, the 22nd.
Any chance the forum will stop logging people out so often?
I don't mind changing my password, but the last time I tried, the software wouldn't accept my username. Apparently I got real lucky some five or so years ago, getting the apostrophe in my username. Now the software throws a tizzy fit.
Fortunately, my current password is longer than 7 characters…!
Apostrophes are a nightmare when it comes to databases... :D
Looks like the coupon doesn't work with Fast Grab either :/
Also it doesn't seem to work with the $1.99 items in today's sale: https://www.daz3d.com/plethora-of-items-for-your-library#index=0&order=popular^1&filtered=1
https://xkcd.com/327/
How does Daz know how many characters my password has? That sort of implies our passwords are stored in plain text.
Same with the store.
Great, then I can continue using "password".
Ah, then my passwerd is safe, too. But I may change it to passwurd.
Just count them when you create it, and deny creating any password shorter than seven characters. After that, all that is needed is that the hash matches, the lenght of the password is irrelevant.
ETA: in this case though, they have probably just added code that checks the password length at login also, and rejects those whose password is less than 7 chars, in order to make them update their password. No need to store the number of characters either, here.
Daz doesn't, and they are not.
If you really want people to use safe passwords, make it a discount of 1% per character in our passwords.
haha that's a great idea
+ _ seems, alright then _
I think you can use almost any character, I have included these for years in my (rather long) DAZ password: /%)"=
But there are still many dinosaur sites out there who allow only alphanumeric characters and only a small number of them.
I use 1Password on my Mac & PC, my iPhone & iPad, It's interesting that not every web site follows the same rules about what is acceptable. I usually have 1Password generate a new secure password, Sometimes a web site won't accept the password, and I need to do some editing. It's good to have 1Password store all my passwords.
I used to be wendy❤️catz then one day that was no longer useable
Brilliant. You should be on the World Bank! A policy I would vote for.
I use long passwords as a general rule just by the way I create them to remember easily :)
What I don't understand is sites requiring longer and longer passwords for security when the longer the password the harder to remember and the more chance of people writing them down or creating memos on their devices so they don't forget them :)
Maybe they expect that people are using password managers, then you only need to remember the master password. I have for over 15 years, it makes things much simpler and safer, just press ctrl+a to log in on almost any site.
Thanks, but this information would have been nice when several of us were running around trying to figure out why we couldn't log into DIM several days ago
Are we forced to change the password?
What if we do nothing?
If you can't log in with the old one because it's too short, you're forced to yes. Otherwise not (my old one works fine).
well, I can still login.
edit: oh... just seeing that it is already long enough ;) Just wondering why I get on my account page the message "* Due to recent security updates, passwords must be at least 7 characters. Be sure to update yours!" Seems to be a generic one.
yeah made me check my Google passwords as thought I must have changed it
it auto fills
is still the last longish one I recall though