You are viewing a single thread.
View all comments View context
31 points

…and that, dear admins, is how you get passwords such as fuckthisrule#54, with the number increased by 1 every 90 days.

permalink
report
parent
reply
10 points

And that’s how you get rules put in place to not use a password that’s similar to your old passwords. (I don’t agree with such rules, just to be completely clear)

If you are forced to use long passwords, use book titles, song titles, character names, album names, TV show names, etc etc.

Examples: WutheringHeights$!5, ThePrisonerOfAzkaban:29, TheCountOfMonteChristo33&&

Of course you can put the numbers and symbols anywhere, not just at the end.

permalink
report
parent
reply
30 points
*

If they’re able to determine that you’re using a similar password, it’s because they’re not hashing your passwords and are storing them as plaintext. You should run far far away from any site or service that is able to enforce similarity rules. Because when you properly hash a password, even a minor difference such as upper/lowercase will produce a wildly different result.

permalink
report
parent
reply
19 points

I’ve been wondering about that. I think they get around it by using the “enter your current password” prompt, so they potentially have it in cleartext for the duration of the session.

permalink
report
parent
reply
5 points

it’s better to use poems. I’ve done Hamlets 2b monologue, View From Westminster Bridge, Tell the Truth but Tell it Slanted, The Raven, Iago’s Many a duteous knave, Louis the Dauphin’s I am too high born to be propertied.

Or really any poem you happen to have memorized.

permalink
report
parent
reply
3 points

My company tried disabled Windows Hello/pin for some people. Which means you have to use your main Microsoft password to unlock your computer.

Which means people are going to leave their laptops unlocked or (more likely and) use a simpler password for their main account…

Such a baffling decision. They reversed course on it though. I think…

permalink
report
parent
reply
1 point

I can kind of see the advantage to disabling it, we started using Windows Hello recently and while it’s mostly been good we have seen an increase in the amount of people forgetting their Microsoft password since they no longer need to use it to sign in every day.

permalink
report
parent
reply