3 ms·

Of course we do. My password manager does not work for the Windows login and I need to change it every 3 months. I can remember 1 large complicate pass-sentence

Of course we do. My password manager does not work for the Windows login and I need to change it every 3 months. I can remember 1 large complicate pass-sentence, but not a different one every three months.

ahelwer 7y ago
The answer here is to use a Windows Hello PIN along with a very complicated password (stored in your password manager) that is almost never used.
- cptskippy 7y ago
  Except most organizations won't let you.
cptskippy 7y ago
Same. I'm currently on the 15th permutation of the same password. But we implemented 2Fa this year so now I still have to change my password regularly, and pull a code from my phone that's generated on demand (as opposed to temporal rollover) so it needs to be connected, AND I have to enter in my password about 75 times a day because it goes part and parcel with the 2Fa prompts.
droobles 7y ago
samesies
DebtDeflation 7y ago
Same here. I have a fairly complex (secure) password I use at work and they make me change it every 90 days so I just appended an "01" to it which I increment on every change.
vlunkr 7y ago
For cases like these I semi-seriously suggest using a keyboard with programmable macros. Usually people laugh it off but I think it's not the worst idea. Almost no one I know would know how to find and execute a macro on my keyboard, if they even considered looking for a password there.
- clarry 7y ago
  One better: a password generator in keyboard. You give it a master key and a short code, it derives a password from those two. Doesn't work in organizations that don't let you bring your own custom hardware though :C
- Jach 7y ago
  I may have done this at an employer. You don't need a keyboard with programmable macros, though, just a way in the OS to setup a keyboard shortcut to run a command. In Linux it's super easy to make "super + x", or other modifiers + key, execute a bash program. That bash program can then use xdotools to type a password, generated and type a 2FA token, type a ¯\_(ツ)_/¯ string (because slack imagified the emoji version making it unreadable), whatever...

ahelwer 7y ago

The answer here is to use a Windows Hello PIN along with a very complicated password (stored in your password manager) that is almost never used.

cptskippy 7y ago
Except most organizations won't let you.

cptskippy 7y ago

Same. I'm currently on the 15th permutation of the same password. But we implemented 2Fa this year so now I still have to change my password regularly, and pull a code from my phone that's generated on demand (as opposed to temporal rollover) so it needs to be connected, AND I have to enter in my password about 75 times a day because it goes part and parcel with the 2Fa prompts.

droobles 7y ago

samesies

DebtDeflation 7y ago

Same here. I have a fairly complex (secure) password I use at work and they make me change it every 90 days so I just appended an "01" to it which I increment on every change.

vlunkr 7y ago

For cases like these I semi-seriously suggest using a keyboard with programmable macros. Usually people laugh it off but I think it's not the worst idea. Almost no one I know would know how to find and execute a macro on my keyboard, if they even considered looking for a password there.

clarry 7y ago
One better: a password generator in keyboard. You give it a master key and a short code, it derives a password from those two. Doesn't work in organizations that don't let you bring your own custom hardware though :C
Jach 7y ago
I may have done this at an employer. You don't need a keyboard with programmable macros, though, just a way in the OS to setup a keyboard shortcut to run a command. In Linux it's super easy to make "super + x", or other modifiers + key, execute a bash program. That bash program can then use xdotools to type a password, generated and type a 2FA token, type a ¯\_(ツ)_/¯ string (because slack imagified the emoji version making it unreadable), whatever...