Cross posting for wider visibility. Please respond to the wikitech-l
thread if you have concerns or questions.

Bryan

---------- Forwarded message ---------
From: Gergo Tisza <[email protected]>
Date: Wed, Jun 4, 2025 at 3:27 PM
Subject: [Wikitech-l] Please update your bot is if is using
(non-bot-)password-based login
To: Wikimedia developers <[email protected]>


Hi!

Since the introduction of AuthManager in 2016, there are two
officially supported authentication methods for bots:

obtaining a session cookie using the action=login API with a bot password;
loginless authentication using OAuth 1.0 or 2.0 with an owner-only consumer.

action=login with a normal password has been deprecated for a decade,
and action=clientlogin API was never supported for non-interactive
login. Still, in the past, these methods worked most of the time -
often enough that many bots kept using them.

This is going to change very soon as we are introducing more
interactive challenges during login to improve account security. If
your bot still uses one of the non-supported methods, please change it
now. Usually this only requires generating a bot password via
Special:BotPasswords and giving the bot that instead of your normal
password.

For the change that prompted this email, see T395205. There will
probably be more such changes in the future, and they won't be
announced separately.

Thanks for your understanding, and for your help in evolving the
Wikimedia developer ecosystem.
_______________________________________________
Wikitech-l mailing list -- [email protected]
To unsubscribe send an email to [email protected]
https://lists.wikimedia.org/postorius/lists/wikitech-l.lists.wikimedia.org/
_______________________________________________
Cloud-announce mailing list -- [email protected]
List information: 
https://lists.wikimedia.org/postorius/lists/cloud-announce.lists.wikimedia.org/
_______________________________________________
Cloud mailing list -- [email protected]
List information: 
https://lists.wikimedia.org/postorius/lists/cloud.lists.wikimedia.org/

Reply via email to