3 ms·
Tip: Some systems only remember your last 3 or 10 passwords, so it's worth rotating up to Password9 and then coming back to Password0. Tip given by my boss who
by tajen 10y ago
Tip: Some systems only remember your last 3 or 10 passwords, so it's worth rotating up to Password9 and then coming back to Password0. Tip given by my boss who received it by his chain of command of old people who couldn't remember the password change. True story.
- Jaruzel 10y agoWhich is why in a lot of corporate systems, the password history is set to 13 last passwords. a) it prevents a 0-9 rotation, and b) it also prevents people rolling passwords based on month name or number.
- dzdt 10y agoWhy is why password rolling is then based on an alphabetical roll, or pure numerical increment, or month and year. No real entropy gain!
- daneyh 10y agoAugust2016 September2016 October2016 etc. pls don't hack me
- Jaruzel 10y agoI didn't say it was a good system ;) As the implementer, I've argued many times about it, but the ITSec bods always think they know best.
- gpderetta 10y agoThat's what hexadecimal digits are for :)
- MereInterest 10y agoDo they put a maximum on how many times you can change your password? If not, you could just cycle through 13 passwords in 5 minutes, then switch back to your original password.
- Ntrails 10y agoI'm not sure that it makes much difference whether I reset to 0 or keep going through 10 and up. My biggest frustration is that every password change I'll mistype my closing digit for about a week before muscle memory gets the new one right, (Although this time I had a unique experience where I adjusted quite quickly from "2" to "3" and because I was still thinking "don't forget to incrememnt" ended up typing "4". Uggggghhhhhhhhhh)
- TeMPOraL 10y ago... and then you get locked out because your domain controller (or whatever) is set up to ban you after ~3 invalid login attempts in a row. Happened to me once.