3 ms·

Last month i gave up my dinosaur status (using a ciphered pen and paper notebook for managing my passwords) and started using Lastpass. To be honest, i still f

by elorm 8y ago

Last month i gave up my dinosaur status (using a ciphered pen and paper notebook for managing my passwords) and started using Lastpass. To be honest, i still feel a bit wary about keeping my password in the cloud, but LastPass has been so amazingly convenient, it's well worth the risk. To be extra certain incase of an undisclosed breach, I 2FA everything that has a 2FA option. I know i'm very late to the ballpark, but i'd rather corporate organizations add Password Managers to their policies instead of forcing everyone to change ever so often and worsening the situation.

elliottcarlson 8y ago
As long as PCI, or ISO 27001, continue to require password rotation policies, it will be hard to implement for some companies, depending on the infrastructure and who has access to what. Hopefully we will see more things following the NIST guidelines, since it's a pretty ineffective way of ensuring security.