550
NIST proposes barring some of the most nonsensical password rules (arstechnica.com)
submitted 2 years ago by to c/technology@lemmy.world
165 comments fedilink hide all child comments
 

Here is the text of the NIST sp800-63b Digital Identity Guidelines.

you are viewing a single comment's thread
view the rest of the comments
[–] 10 points 2 years ago* (2 children)

I usually invent answers to those and store those answers in a password manager. Essentially turns them into backup passwords that can be spoken over the phone if necessary.

Where was I born? "Stallheim, EUSA, Mars"

Name of first pet? "Groovy Tuesday"

It's fun, usually.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] 4 points 2 years ago (1 child)

    What is the first name of your first best friend?

    eoY&Z9m4LNRDY!Gzdd%q98LYiBi8Nq

    Oh old eoY&Z9m4LNRDY!Gzdd%q98LYiBi8Nq and I go way back! I met eoY&Z9m4LNRDY!Gzdd%q98LYiBi8Nq in Pre-K and we’ve been inseparable ever since.

    It is quite annoying if they’re a service that makes you read aloud your security questions to phone reps to prove your identity. One of my retirement accounts requires that and I have to sigh and read out the full string. I’ve changed it since to an all lowercase, 20 digit string as a compromise.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 5 points 2 years ago*

    20 character all lowercase is very secure as long as its random words / letters that would make it unguessable by knowing you.

    Edit: you could also prefix it if you think you'd have to read it

    "This question is stupid fuck nuts house gravel neptune cow."

  • permalink
  • fedilink
  • source
  • parent