3 ms·
If two-factor authentication or single sign-on is not an option, should you force at least partly random passwords for employees to prevent password re-use? In
by jpalomaki 10y ago
If two-factor authentication or single sign-on is not an option, should you force at least partly random passwords for employees to prevent password re-use?
In the past this would have been considered as bad practise, since nobody can remember that kind of passwords but nowadays it is pretty clear that everybody (in IT) is either using some password manager or reusing their passwords between systems.
(And to clarify, I'm not talking about end users of service like Dropbox, but people who are working with security sensitive stuff on the backend)