3 ms·
Which is why in a lot of corporate systems, the password history is set to 13 last passwords. a) it prevents a 0-9 rotation, and b) it also prevents people roll
by Jaruzel 10y ago
Which is why in a lot of corporate systems, the password history is set to 13 last passwords. a) it prevents a 0-9 rotation, and b) it also prevents people rolling passwords based on month name or number.
- dzdt 10y agoWhy is why password rolling is then based on an alphabetical roll, or pure numerical increment, or month and year. No real entropy gain!
- daneyh 10y agoAugust2016 September2016 October2016 etc. pls don't hack me
- Jaruzel 10y agoI didn't say it was a good system ;) As the implementer, I've argued many times about it, but the ITSec bods always think they know best.
- gpderetta 10y agoThat's what hexadecimal digits are for :)
- MereInterest 10y agoDo they put a maximum on how many times you can change your password? If not, you could just cycle through 13 passwords in 5 minutes, then switch back to your original password.