611
Your password has expired (thelemmy.club)
submitted 2 years ago* by to c/cybersecuritymemes@lemmy.world
84 comments fedilink hide all child comments
 

This practice is not recommended anymore, yet still found in many enterprises.

I am once again asking you to change your password
you are viewing a single comment's thread
view the rest of the comments
[–] 19 points 2 years ago (2 children)

My company's HR system (like, time off, time clock, etc.) asks for a new password every 3 months, but it doesn't give any fucks at all if you just reuse the current password apparently. I've been "changing" it to the same thing for like a year now.

  • permalink
  • fedilink
  • source
  • hideshow 2 child comments
    •
  • [–] 17 points 2 years ago

    Which is often a lot more secure than requiring you to create a new password. Requiring a new password frequently leads to people making memorable passwords which are a lot less secure than a good password which is kept for years.

    A few years back, my company suffered a big cyber attack where the attack vector was the credentials of a high level user who frequently changed their password to the year and month for next password change, i.e. "2018october". Apparently this was common enough that the attackers were able to brute force/guess it.

  • permalink
  • fedilink
  • source
  • parent