2 ms·
What do you do for forced password change requirements? Does your threat model include anything NOT bulk, ie where a human would see a password and guess the p
by ohthehugemanate 9y ago
What do you do for forced password change requirements?
Does your threat model include anything NOT bulk, ie where a human would see a password and guess the pattern?
Have you tried any of the password managers that have integrations, to automate password changes in case of failure?
Have you ever heard of the security concept of minimizing your attack surface?
- Waterluvian 9y agoMy algorithm gives me flexibility to increment the password. I've had to do this before and almost all the time, I use it enough that I simply remember, "oh this banking site is incremented twice". I have no opinion on password managers. It's just something I don't want to commit time to. My solution is easy and requires no management on my part. Ie. no software or hardware or anything to maintain.