3 ms·
Minimum of 16 characters?? Do they not have any fraud screening or rate limiting on these things, 2FA on unknown devices or something? I've had my same passwo
by onphonenow 4y ago
Minimum of 16 characters??
Do they not have any fraud screening or rate limiting on these things, 2FA on unknown devices or something?
I've had my same password forever (I'm old) on google without issue) that is scary short. However, when I login from a new device or every 30 days or go to an admin / security page it asks me to stick my yubico key into my computer. Works fine.
Is this same password used for high volume API stuff without anything else? Normally that's with an access token type system (at least on AWS). Those, yes, should be highly complex. The AWS access / secret key combo is ridiculous frankly in length (mixed case + numbers + symbols) * 40.
- smt88 4y agoMinimum of 16 characters is great, especially for a service with technical users. "Scary short" and "same password" are terrifying to read. Get a password manager (I recommend 1Password) and use it. My dad is 78 and uses a password manager -- so can you. Regardless, stop reusing your password please! This is the most basic security measure possible.
- onphonenow 4y agoScary short is fine. 6 characters (case sensitive + 10 digits alone) = plenty of complexity if you are doing ANY type of intrusion detection. Coupled with a Yubico and I feel pretty darn secure. I don't re-use the password, because it doesn't rotate I can also remember it.