Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

I have seen passwords like "Fall2013!". Bet you can't guess how often they had to change their password.. or what this user's current password is....

But yes, IT admins, go on thinking if you just finely craft and tune your password policy enough you'll make users come up with secure passwords.



... when the policy is to change your password every quarter, and include a mix of case and punctuation, the policy is to use the season, the year, and an exclamation point.

I worked at a place where you could log in to just about anyone's account because our managers literally told us to take this approach so that we'd be less likely to forget what our password was.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: