3 ms·
This is why I simply don't understand the modern approach in Password requirements, while yes, it is simply too easy to crack a password if it's somewhat simpli
by darklycan51 3y ago
This is why I simply don't understand the modern approach in Password requirements, while yes, it is simply too easy to crack a password if it's somewhat simplistic.
I've been on websites where they force you to update your password every X months (and it has a lot of special key requirements) and you cannot reuse old passwords (which would really not be a problem regarding cracking... unless they store your old passwords... which is counter productive...)
It basically turns into being unable to memorize all your passwords and being forced to use a service like this, which OBVIOUSLY any genius knows eventually will get hacked and your passwords leaked, ALL your passwords, at the same time.
If you instead attempt to memorize (like I do) because of all the different cases in which you have to swap passwords, you end up with at least 20 passwords you gotta memorize for every site...
I actually absolutely hate how the web works today especially regarding logging in.
- tedunangst 3y agoThe rotation requirement is possibly misguided but does solve the problem where the passwords were leaked months ago. If everybody affected had rotated passwords three months later, this problem wouldn't even exist today. Old leaks often show up a long time later. A lot of people had yahoo? email accounts hacked because they used the same linkedin? password, but the leak was from years prior. If yahoo had required rotation, the password list would have been useless by the time it circulated.
- lxgr 3y agoHow would you enforce mandatory password rotation for wallet seed phrases, though? That kind of defeats the purpose of a cold wallet.