▲ 1179 ▼ Passwords (lemmy.world) submitted 3 years ago by 8tpercent@lemmy.world to c/technology@lemmy.world 240 comments fedilink hide all child comments We've all been there.
[+] confetti_8tVST5@lemmy.world 26 points 3 years ago* (last edited 3 years ago) (2 children) [deleted] permalink fedilink source hideshow 4 child comments replies: [–] setsneedtofeed@lemmy.world 12 points 3 years ago* (4 children) Unfortunately a lot of jobs require passwords and they use outdated security processes, forcing people to have the old fashioned “must have uppercase, lowercase, number, and special character & you have to change it every 3 months for no reason” passwords instead of the stronger (and less annoying) alternatives. permalink fedilink source parent hideshow 8 child comments replies: [–] funkless@lemmy.world 10 points 3 years ago (1 child) i signed up at mba.com and it wouldn't let me use a password because it contained a semicolon which wasn't on the approved list of special characters, and then - get this - because I tried too many times to create a password - locked me out because I had "too many failed attempts" permalink fedilink source parent hideshow 2 child comments replies: [–] Linssiili@sopuli.xyz 2 points 3 years ago Sounds like it's prime time for a SQL-injection permalink fedilink source parent [–] CoderKat@lemm.ee 7 points 3 years ago (1 child) Those requirements drive me crazy, especially because they're all against NIST recommendations. Someone thinks they make passwords more secure but they have the opposite effect. At any rate, password managers still help in those cases. If nothing else, for providing a safe place to record what your password is for when you forget it because of the dumb requirements. permalink fedilink source parent hideshow 2 child comments replies: [–] setsneedtofeed@lemmy.world 4 points 3 years ago (1 child) I always wonder if such choices come from incompetent IT, or if IT wants to do things better but is banging their heads against corporate owners who think “more hassle = more secure”. permalink fedilink source parent hideshow 2 child comments replies: [–] peto@lemm.ee 1 point 3 years ago It's almost certainly that writing security standards for an organization takes time and needs approval from high up. And someone high up complaining that they only just revised them to include special characters. permalink fedilink source parent [–] mikiao@lemmy.world 6 points 3 years ago Must be changed every month, can't use a previous password, AND, for some fucking reason, can only contain 8 characters. And if you forgot your password, you can call IT and they'll just read it to you because they have them all saved somewhere. That was a great place to work at. permalink fedilink source parent [–] darkkite@lemmy.ml 5 points 3 years ago that's exactly why a password manager works. there's a generator that you can configure to meet requirements permalink fedilink source parent [–] Archpawn@lemmy.world 1 point 3 years ago (1 child) Still frustrating. I generally try to make my passwords all lowercase in case I need to type them (especially on a phone). But a lot of places don't allow that. permalink fedilink source parent hideshow 2 child comments replies: [+] confetti_8tVST5@lemmy.world 0 points 3 years ago* (last edited 3 years ago) (1 child) [deleted] permalink fedilink source parent hideshow 2 child comments replies: [–] Archpawn@lemmy.world 1 point 3 years ago If I'm typing on a computer keyboard, typing words is easier than random letters, but on a phone it doesn't make much of a difference. What I end up doing is typing my passphrase into my password manager on the computer, and then typing the password on there into my phone. I do have a password manager app for my phone, but then I have to type the whole passphrase into it so I don't use it unless necessary. permalink fedilink source parent
[–] setsneedtofeed@lemmy.world 12 points 3 years ago* (4 children) Unfortunately a lot of jobs require passwords and they use outdated security processes, forcing people to have the old fashioned “must have uppercase, lowercase, number, and special character & you have to change it every 3 months for no reason” passwords instead of the stronger (and less annoying) alternatives. permalink fedilink source parent hideshow 8 child comments replies: [–] funkless@lemmy.world 10 points 3 years ago (1 child) i signed up at mba.com and it wouldn't let me use a password because it contained a semicolon which wasn't on the approved list of special characters, and then - get this - because I tried too many times to create a password - locked me out because I had "too many failed attempts" permalink fedilink source parent hideshow 2 child comments replies: [–] Linssiili@sopuli.xyz 2 points 3 years ago Sounds like it's prime time for a SQL-injection permalink fedilink source parent [–] CoderKat@lemm.ee 7 points 3 years ago (1 child) Those requirements drive me crazy, especially because they're all against NIST recommendations. Someone thinks they make passwords more secure but they have the opposite effect. At any rate, password managers still help in those cases. If nothing else, for providing a safe place to record what your password is for when you forget it because of the dumb requirements. permalink fedilink source parent hideshow 2 child comments replies: [–] setsneedtofeed@lemmy.world 4 points 3 years ago (1 child) I always wonder if such choices come from incompetent IT, or if IT wants to do things better but is banging their heads against corporate owners who think “more hassle = more secure”. permalink fedilink source parent hideshow 2 child comments replies: [–] peto@lemm.ee 1 point 3 years ago It's almost certainly that writing security standards for an organization takes time and needs approval from high up. And someone high up complaining that they only just revised them to include special characters. permalink fedilink source parent [–] mikiao@lemmy.world 6 points 3 years ago Must be changed every month, can't use a previous password, AND, for some fucking reason, can only contain 8 characters. And if you forgot your password, you can call IT and they'll just read it to you because they have them all saved somewhere. That was a great place to work at. permalink fedilink source parent [–] darkkite@lemmy.ml 5 points 3 years ago that's exactly why a password manager works. there's a generator that you can configure to meet requirements permalink fedilink source parent
[–] funkless@lemmy.world 10 points 3 years ago (1 child) i signed up at mba.com and it wouldn't let me use a password because it contained a semicolon which wasn't on the approved list of special characters, and then - get this - because I tried too many times to create a password - locked me out because I had "too many failed attempts" permalink fedilink source parent hideshow 2 child comments replies: [–] Linssiili@sopuli.xyz 2 points 3 years ago Sounds like it's prime time for a SQL-injection permalink fedilink source parent
[–] Linssiili@sopuli.xyz 2 points 3 years ago Sounds like it's prime time for a SQL-injection permalink fedilink source parent
[–] CoderKat@lemm.ee 7 points 3 years ago (1 child) Those requirements drive me crazy, especially because they're all against NIST recommendations. Someone thinks they make passwords more secure but they have the opposite effect. At any rate, password managers still help in those cases. If nothing else, for providing a safe place to record what your password is for when you forget it because of the dumb requirements. permalink fedilink source parent hideshow 2 child comments replies: [–] setsneedtofeed@lemmy.world 4 points 3 years ago (1 child) I always wonder if such choices come from incompetent IT, or if IT wants to do things better but is banging their heads against corporate owners who think “more hassle = more secure”. permalink fedilink source parent hideshow 2 child comments replies: [–] peto@lemm.ee 1 point 3 years ago It's almost certainly that writing security standards for an organization takes time and needs approval from high up. And someone high up complaining that they only just revised them to include special characters. permalink fedilink source parent
[–] setsneedtofeed@lemmy.world 4 points 3 years ago (1 child) I always wonder if such choices come from incompetent IT, or if IT wants to do things better but is banging their heads against corporate owners who think “more hassle = more secure”. permalink fedilink source parent hideshow 2 child comments replies: [–] peto@lemm.ee 1 point 3 years ago It's almost certainly that writing security standards for an organization takes time and needs approval from high up. And someone high up complaining that they only just revised them to include special characters. permalink fedilink source parent
[–] peto@lemm.ee 1 point 3 years ago It's almost certainly that writing security standards for an organization takes time and needs approval from high up. And someone high up complaining that they only just revised them to include special characters. permalink fedilink source parent
[–] mikiao@lemmy.world 6 points 3 years ago Must be changed every month, can't use a previous password, AND, for some fucking reason, can only contain 8 characters. And if you forgot your password, you can call IT and they'll just read it to you because they have them all saved somewhere. That was a great place to work at. permalink fedilink source parent
[–] darkkite@lemmy.ml 5 points 3 years ago that's exactly why a password manager works. there's a generator that you can configure to meet requirements permalink fedilink source parent
[–] Archpawn@lemmy.world 1 point 3 years ago (1 child) Still frustrating. I generally try to make my passwords all lowercase in case I need to type them (especially on a phone). But a lot of places don't allow that. permalink fedilink source parent hideshow 2 child comments replies: [+] confetti_8tVST5@lemmy.world 0 points 3 years ago* (last edited 3 years ago) (1 child) [deleted] permalink fedilink source parent hideshow 2 child comments replies: [–] Archpawn@lemmy.world 1 point 3 years ago If I'm typing on a computer keyboard, typing words is easier than random letters, but on a phone it doesn't make much of a difference. What I end up doing is typing my passphrase into my password manager on the computer, and then typing the password on there into my phone. I do have a password manager app for my phone, but then I have to type the whole passphrase into it so I don't use it unless necessary. permalink fedilink source parent
[+] confetti_8tVST5@lemmy.world 0 points 3 years ago* (last edited 3 years ago) (1 child) [deleted] permalink fedilink source parent hideshow 2 child comments replies: [–] Archpawn@lemmy.world 1 point 3 years ago If I'm typing on a computer keyboard, typing words is easier than random letters, but on a phone it doesn't make much of a difference. What I end up doing is typing my passphrase into my password manager on the computer, and then typing the password on there into my phone. I do have a password manager app for my phone, but then I have to type the whole passphrase into it so I don't use it unless necessary. permalink fedilink source parent
[–] Archpawn@lemmy.world 1 point 3 years ago If I'm typing on a computer keyboard, typing words is easier than random letters, but on a phone it doesn't make much of a difference. What I end up doing is typing my passphrase into my password manager on the computer, and then typing the password on there into my phone. I do have a password manager app for my phone, but then I have to type the whole passphrase into it so I don't use it unless necessary. permalink fedilink source parent
