4 ms·
For places that enforce password changes, I can always tell how old my account is by (password change frequency) * (counter I put at end of password). I can't
by Goronmon 2y ago
For places that enforce password changes, I can always tell how old my account is by (password change frequency) * (counter I put at end of password).
I can't because there is generally a limit to how many passwords it checks for previous use. So you can usually just start back at "1" for the increment after you hit "0".
- SAI_Peregrinus 2y agoI just use a strong PascalCase passphrase (as strong as feasible if they have a stupidly short limit) and the year & month of the last password change. Something like `PascalCasePassphraseButRandomlyGeneratedProperly2024-12` for one this month. Fits many composition rules (those are also recommended against) by having uppercase, lowercase, numbers, and punctuation. Doesn't repeat previous passwords. And the entropy of the actual 7-word diceware passphrase is about 90 bits, which is pretty decent.