All staff and all students have to change their password every 90 days with no repetition or duplication. Last month it told me that SISOSIG was a word in the dictionary! so I could not use it. Now I am using one of my 3 main passwords and every 90 days moving it all one character to the right so 'Q'' becomes ''W'' etc
How do you remember your passwords?
- Thread starter markwombat
- Start date
Because if someone finds out the one strong password, they in turn have access to all of the others
Kind of, if they were to find out that single password it means they could access the program to find out the other passwords. This means they would need access to either the machine that the software is installed on, or a copy of the database it's stored in.
This is different to finding out someone's password and then being able to go and log into a website with their account.
For instance you could reasonably safely post up your one secure password for your password database up here for all to see, doesn't mean people will then be able to start using your accounts everywhere
Just playing devils advocate, whilst these password databases are undoubtedly handy (and a must in a work environment) I still just use by brain to remember things.
The problem is that rules won't allow a lot of passwords, these are the rules for my work computer, I have to change password every 3 months.
- Must be different than the last 20 passwords !!!!
- Must contain 3 of these groups: normal, caps, numbers, special symbols
- A lot of easy passwords like abcd1234 or names of the company or your own last name are not allowed
On top of that, I have the SAP system that has it's own set of rules and two online banks with passwords and passwords for online payments.
For work I have 10 passwords, personally I have another 42 with all forums, webshops, PSN etc.
I am sick of passwords
- Must be different than the last 20 passwords !!!!
- Must contain 3 of these groups: normal, caps, numbers, special symbols
- A lot of easy passwords like abcd1234 or names of the company or your own last name are not allowed
On top of that, I have the SAP system that has it's own set of rules and two online banks with passwords and passwords for online payments.
For work I have 10 passwords, personally I have another 42 with all forums, webshops, PSN etc.
I am sick of passwords
Erm post it notes stuck to my monitors surround, except for the password for my PC which is on a note stuck to the bottom of my keyboard...
More seriously, passwords I have to use every day tend to be something I'll remember fairly easily but make no sense to anyone else (abbreviated sentences with dates or similar muddled in), passwords that I don't use much tend to be noted down somewhere (I have one full set of passwords noted down somewhere in the house for if i forget).
Oddly despite being able to remember some fairly long/complex passwords (and my card numbers), I tend to have problems remembering my card's 3 digit confirmation code...
More seriously, passwords I have to use every day tend to be something I'll remember fairly easily but make no sense to anyone else (abbreviated sentences with dates or similar muddled in), passwords that I don't use much tend to be noted down somewhere (I have one full set of passwords noted down somewhere in the house for if i forget).
Oddly despite being able to remember some fairly long/complex passwords (and my card numbers), I tend to have problems remembering my card's 3 digit confirmation code...
.
We've got similar, and for several different systems too. One that I use also has to be a minimum of 13 characters and doesn't allow repeating characters
There's a few Sites I can no longer use as I have forgotten Passwords and even the Usernames and the Email addresses I used are long dead and gone, so retrieval is not possible, I even have two STEAM Accounts I can't use like this :S
I also hate Sites that make you use certain types of Password, like HAS to be 8 characters or more and HAS to have Numbers in it for SECURITY but then won't accept non Alpha-Numeric Characters!! FUUUUUUUUUUUUUUUUUUUuuuuuuuuu!!!!
I also hate Sites that make you use certain types of Password, like HAS to be 8 characters or more and HAS to have Numbers in it for SECURITY but then won't accept non Alpha-Numeric Characters!! FUUUUUUUUUUUUUUUUUUUuuuuuuuuu!!!!
I am only a member of two forums, ebay and email. And the password is completely unguessable.
Soldato
- Joined
- 10 Oct 2005
- Posts
- 8,706
- Location
- Nottingham
Sounds like the standard CIS(*) standard password complexity rules
I spent a while yesterday writing a check script for making sure servers had been configured to rules along those lines ...
(*) Centre for Internet Security
Caporegime
- Joined
- 12 Mar 2009
- Posts
- 26,779
Most of my passwords are quite long, this means I forget them a lot so I came up with something that works for me. I type the first half of my password and save it as a text document, then when it's time to log into something if I can't remember the password I'll open the text document and look at the first bit which in turn jogs my memory as to what the second half of the password was.
Most of my passwords are 64 characters where possible. Or the maximum amount of characters possible dependant on site. I keep them in a plain text file on an SD card and just copy and paste them. That's for shopping websites and the like. For forums and social networks I have three based on a biblical passage that vary in order.