[123attendees] Fwd: Action required: Update to IETF Datatracker password requirements starting 8 July

[Ira McDonald <[e-mail]>]

URGENT - old Datatracker passwords (less than 12 characters w/ more
complexity)
will STOP working on 8 July 2025 - no uploads, no meetings (including IETF
123).

---------- Forwarded message ---------
From: Barry Leiba <[e-mail]>
Date: Tue, Jul 1, 2025 at 5:02 PM
Subject: [Cbor] Fwd: Action required: Update to IETF Datatracker password
requirements starting 8 July
To: CBOR <[e-mail]>


This is important, so we're making sure that everyone sees this -- for
people not paying attention to ietf-announce.

Barry

---------- Forwarded message ---------
From: Robert Sparks <[e-mail]>
Date: Tue, Jul 1, 2025 at 4:08 PM
Subject: Action required: Update to IETF Datatracker password
requirements starting 8 July

(also available at
https://mailarchive.ietf.org/arch/msg/ietf-announce/Xy4PpQHnkZCLXQ4j8J3s2aWeDFc/
)

Beginning with a Datatracker update scheduled for 8 July, after the I-D
submission deadline for IETF 123 Madrid has passed, passwords for the
IETF Datatracker will be required to have at least 12 characters and be
sufficiently complex.[1]


You should verify your password meets the new requirements using the
“New password” field on the change password form after logging in:

https://datatracker.ietf.org/accounts/password/

On that form, a complexity bar and text below the new password field
will provide guidance. When the bar is green, the password will be
accepted. If your current password does not meet the requirements,
please go through the password change process to set a new one that does
meet them. If you are not already logged into Datatracker, this process
requires confirmation via your primary Datatracker email address.

IMPORTANT: If you are already logged into the Datatracker, do not assume
that your password will continue to work without verifying it.

Especially if you plan to participate in IETF 123, you should verify
your password meets these requirements as soon as possible. Datatracker
login is required to join MeetEcho for meeting sessions, whether you are
participating in-person or remotely. Logging into the Datatracker well
before the meeting starts will help ensure you don’t encounter delays
when joining a meeting session for the first time.

If you are the chair of an IETF working group or IRTF research group,
please share this update with your group.

This change eases a future migration to an authentication system that
will allow for federated login, MFA, and passkeys. The new system also
will allow the authentication process used for various IETF-provided
services to be more robust.

Another reminder about this change will be sent shortly after the
Datatracker update is deployed on 8 July.

Robert Sparks
Senior Director of Information Technology for the IETF LLC

[1] zxcvbn is being used to determine complexity
(https://github.com/dropbox/zxcvbn)