3 ms·
Why don't we just stop allowing users to choose their passwords?
by d_theorist 10y ago
Why don't we just stop allowing users to choose their passwords?
- GordonS 10y agoBecause unless users are using a password manager, they need to be able to remember them (and anyone using a password manager is going to be generating secure passwords anyway)
- rprospero 10y agoThe main reason is that, if IT chooses the user passwords, then the users simply forget the password. Thus, the system for resetting a lost password becomes part of the default login process. In which case, you might as well having a password in the first place.
- lloeki 10y ago> the system for resetting a lost password becomes part of the default login process So the system could basically fall back to being OTP?