3 ms·
That looks saner than ours; The chosen password must: - Be at least 10 (ten) characters long (and must not be longer than 127 characters) - Contain at l
by misnome 7y ago
That looks saner than ours;
The chosen password must:
- Be at least 10 (ten) characters long (and must not be longer than 127 characters)
- Contain at least 8 (eight) different characters, each of which is used only ONCE
- Contain at least 2 letters (case sensitive)
- Contain at least 2 numbers
- Contain at least 2 of the symbols !”#$%&’()*+,-/:;<=>?@[\]^_`{}~¦
The chosen password must not:
- Contain a £ (Pound) character
- Have 3 of any repeating character next to each other
- Spell a word of 4 letters or more listed in a common dictionary (Most 4 letter combinations)
- Be an abbreviation associated with the company
- Be based on your user name
Unsurprisingly, almost everyone just memorises the initial random password given out, since it's provided on a nice piece of paper when you start. Thankfully there isn't also an expiry policy. The max length is large but that's basically meaningless when you actually need to remember it and it takes a while to come up with even a random password that fulfills these requirements.
- BrandoElFollito 7y agoI work in information security for 25 years. This is the most surrealistic password policy I have seen. Fantastic awareness training material you have here (in the section "see, others have it worse than we do") A sad part is that it is virtually impossible to use a password manager to generate a new password.