4 ms·
I despise expiring passwords. My university makes me change my password every 6 months, and they keep a list of the last 2 year's worth of passwords so that yo
by coreyp_1 11y ago
I despise expiring passwords. My university makes me change my password every 6 months, and they keep a list of the last 2 year's worth of passwords so that you can't reuse them. That, and they disallow some characters such as "#" and " " (space). It's annoying.
- JoeAltmaier 11y agoTypically, folks just change the '1' at the end to '2'. And so on. I agree this is another totally pointless password rule that helps nobody.
- draven 11y agoThey also did that at one of my previous workplace. We couldn't reuse any of the passwords we used in the past (no limit apparently), but in the form to change our password, they checked if the current and new passwords were different w/ some Js. With the help of firebug we could keep the same password as long as we wanted.
- falcolas 11y agoI don't care for them either, but there is definitely a purpose: it limits the vulnerability period of a users password compromise. For example, if you share passwords between sites, compromising one site gives you a limited time frame in which to attack the other. 6 months isn't even a bad compromise; some places with high security requirements make it 30 days.