2 ms·
For places that enforce password changes, I can always tell how old my account is by (password change frequency) * (counter I put at end of password). My actua
by brookst 2y ago
For places that enforce password changes, I can always tell how old my account is by (password change frequency) * (counter I put at end of password).
My actual password choices are secure, memorable, and available even if I lose my phone or password manager. The counter is just an annoyance.
- Goronmon 2y agoFor places that enforce password changes, I can always tell how old my account is by (password change frequency) * (counter I put at end of password). I can't because there is generally a limit to how many passwords it checks for previous use. So you can usually just start back at "1" for the increment after you hit "0".
- SAI_Peregrinus 2y agoI just use a strong PascalCase passphrase (as strong as feasible if they have a stupidly short limit) and the year & month of the last password change. Something like `PascalCasePassphraseButRandomlyGeneratedProperly2024-12` for one this month. Fits many composition rules (those are also recommended against) by having uppercase, lowercase, numbers, and punctuation. Doesn't repeat previous passwords. And the entropy of the actual 7-word diceware passphrase is about 90 bits, which is pretty decent.