Hieronder de officiele berichtgeving van 37signals

Concerning 37signals Accounts

Some folks have been asking how the 37signals Accounts transition will affect their clients' usernames and passwords. We've put together a list of common questions and answers addressing this topic below.

1. Will my clients have to create a new username and password too?

Yes, everyone who uses Basecamp (or Highrise, Backpack, or Campfire) will be prompted to create a new username and password. They'll only have to do this once and it will only take a few seconds.

2. When will they have to create a new username and password?

We'll be launching the transition during the week of December 13, 2009. The first time someone signs in after the new system is in place, they'll be asked to pick a new username and password (here's what the screen will look like). Once they choose their new username and password they'll be signed in to their project as usual.

3. Will everyone choose their own or do we need to do it for them?

Everyone will choose their own username and password — this is for security purposes. In the past the admins would create everyone's usernames and passwords, but that isn't ideal from a security perspective. Modern security standards require everyone to choose their own password. This means each person is the only person who knows their password.

4. Will we be able to send a client their username and password?

You won't see their password so you can't send them their password, but you will be able to click a link on the edit user screen that instantly emails the person instructions on how to recover their username and password if they've forgotten them.

5. Will this change our login URL?

Nope. The URL your clients log in at will be the same after they pick a new username and password as it is today. It'll look the same too — your logo right at the top. However, as an added convenience, they'll also be able to log in at basecamphq.com if they don't remember your custom URL.

6. How does this affect future users we add to our accounts?

For now on, people will be invited to join your account via email. You'll enter their email and they'll receive an email with a link to create their account. This way they can pick their own username and password. This method is more secure than the old method where an admin had to pick usernames and passwords for each person. The new method follows modern security practices.

7. Can we delay the transition for our account? When does it end?

Each user will have the option to "snooze" the process for 7 days at a time. This means they won't be prompted to select a new username and password for 7 days after they click the "snooze" link at the bottom of the screen where they are initially asked to choose a new username and password. However, everyone will need to choose a new username and password on or before February 1, 2010.

8. Can people try using their current usernames or do they have to choose a brand new one?

Anyone can try to see if their current username is available, but if it's a common name (like "Bob" or "Jill" or something common like that) it's likely that it will have already been taken by someone else who went through the new username and password process before they did. Just like Google, AOL, Yahoo, Twitter, online banks, and just about every other web-based service that exists today, our new system requires that everyone has a unique user name. No two people can have the same username.

Thank you

Thanks again for being a 37signals customer! We're sorry about the hassle of picking a new username and password, but it's related to an important security upgrade so it's something everyone has to do. Plus it lays the groundwork for a variety of enhancements you've been asking for. We'll be working on these in 2010.