4 ms·
In my organization, forcing users to change passwords every x months. Everybody I know ends up picking simpler to remember passwords from a pool as a result.
by 0xcafecafe 9y ago
In my organization, forcing users to change passwords every x months. Everybody I know ends up picking simpler to remember passwords from a pool as a result.
- mcheshier 9y agoNIST just updated their guidelines, removing the requirement to change passwords, for that very reason. :)
- GordonS 9y agoEveryone I know just increments a number at the end of their password, until it allows them to start from 1 again. ShittyPassword1 ShittyPassword2 ShittyPassword3 ... ShittyPassword8 ShittyPassword1 NIST came out recently against this, so hopefully, hopefully companies will start to listen.