My last job we had to “change” our passwords every 30 days but the computer didn’t flag anything if you used the same one. I literally had the exact same password for 11 straight years.
K
kamilly_sousa1 week, 5 days ago
This is exactly why rotating passwords frequently is NOT best practice, and is actually deprecated by the NIST. Try telling that to idiot clients that think they know security practices better than a) the people they hire to audit them and b) national standards bodies
revadawn741 week, 4 days ago
As a SysAdmin, I was banging my head on my desk because of all the flashbacks I was having.
M
martinemarion4311 week, 4 days ago
i actually make a unique passphrase when i join a new company, but as soon as they make me change it, it becomes Password2! and the next one will be Password3! because if you really cared, you wouldnt force me away from the whacked out 30+ character passphrase i made the first time
sarah_wallace1 week, 5 days ago
I’m the guy who followed the guidlines at work and made a 13 character completely random password that’s used no where else. Then that made me change it every 60 days… it is no longer random
J
juliapope5951 week, 4 days ago
I just love it when I have to provide an uppercase letter, lowercase letter, a number, a special character, a gang sign, a blood sample, and a human sacrifice for my new password.
L
laurencebailly2561 week, 4 days ago
iirc the us army stopped with constant password change because they discovered with evidence that it actually decrease the security considerably and resulted in a lot more breaches. if an organization who should value security the highest with strong incentive ditches something it should be for a damn good reason and you should follow their example.
C
carmen.vigil1 week, 5 days ago
Hmm interesting, I might have to start using that as my password at work.
H
helen_hunter1 week, 4 days ago
I had a job where we changed from a single 4 digit door code to everyone having their own code and no repeats. I told my boss he just made accessing the building 50 times easier by making 50 correct codes instead of one, he just glared at me. I guess tracking employees was more important than building security.
utkarsh.kalita1 week, 4 days ago
I reset a coworker's access every morning for a week before I went down to her computer and watched her login. She entered her credentials, logged in, allowed the browser to saved, answered her new security questions, allowed the browser to overwrite her new "password" as entered...
J
juliapope5951 week, 5 days ago
Hahaha! Truth
S
sierrahayes2171 week, 4 days ago
omgosh, I never expected people to answer the questions with their password.
J
juancarlos.rolón1 week, 5 days ago
If you want random passwords, just provide a random password generator.
P
pénélopevaleon831 week, 4 days ago
My job ditched passwords in favor of 2 factor authentication. The problem is by federal law we can't have our phones on our person most of the time while we're at work except in certain places or times. Anytime the system automatically logs us out we have to stop what we're doing and leave to retrieve our phones and log back in.
O
océane.blin1 week, 4 days ago
The University I work for is actually turning a new leaf on this; our IT department just announced that passwords will *no longer* be rotating. Bonus points: they are encouraging everyone to set distinct pass-"phrases"!
annshah4551 week, 4 days ago
In my first job we had strict rules as well. I noticed that I just had to ask the IT guy to reset my password every 12 months. The reset killed my history too and I was able to reuse the same 12 passwords the following years
irene.humphries1 week, 4 days ago
Yup, that's what ends up happening. When you make it difficult/annoying for people to just do their job, they are going to find a way around it. It's best to let employees create their own unique password and leave them tf alone.
gesine_schinke1 week, 5 days ago
Na na na don't we all just take the PW and add an extra !
H
hakanhenk7471 week, 4 days ago
Yeah nobody can actually be bothered to change passwords on any kind of schedule or this will happen every time
L
liesalangern861 week, 4 days ago
The numbers in my passwords come from whatever book is to my left that day.
My last job we had to “change” our passwords every 30 days but the computer didn’t flag anything if you used the same one. I literally had the exact same password for 11 straight years.
This is exactly why rotating passwords frequently is NOT best practice, and is actually deprecated by the NIST. Try telling that to idiot clients that think they know security practices better than a) the people they hire to audit them and b) national standards bodies
As a SysAdmin, I was banging my head on my desk because of all the flashbacks I was having.
i actually make a unique passphrase when i join a new company, but as soon as they make me change it, it becomes Password2! and the next one will be Password3! because if you really cared, you wouldnt force me away from the whacked out 30+ character passphrase i made the first time
I’m the guy who followed the guidlines at work and made a 13 character completely random password that’s used no where else. Then that made me change it every 60 days… it is no longer random
I just love it when I have to provide an uppercase letter, lowercase letter, a number, a special character, a gang sign, a blood sample, and a human sacrifice for my new password.
iirc the us army stopped with constant password change because they discovered with evidence that it actually decrease the security considerably and resulted in a lot more breaches. if an organization who should value security the highest with strong incentive ditches something it should be for a damn good reason and you should follow their example.
Hmm interesting, I might have to start using that as my password at work.
I had a job where we changed from a single 4 digit door code to everyone having their own code and no repeats. I told my boss he just made accessing the building 50 times easier by making 50 correct codes instead of one, he just glared at me. I guess tracking employees was more important than building security.
I reset a coworker's access every morning for a week before I went down to her computer and watched her login. She entered her credentials, logged in, allowed the browser to saved, answered her new security questions, allowed the browser to overwrite her new "password" as entered...
Hahaha! Truth
omgosh, I never expected people to answer the questions with their password.
If you want random passwords, just provide a random password generator.
My job ditched passwords in favor of 2 factor authentication. The problem is by federal law we can't have our phones on our person most of the time while we're at work except in certain places or times. Anytime the system automatically logs us out we have to stop what we're doing and leave to retrieve our phones and log back in.
The University I work for is actually turning a new leaf on this; our IT department just announced that passwords will *no longer* be rotating. Bonus points: they are encouraging everyone to set distinct pass-"phrases"!
In my first job we had strict rules as well. I noticed that I just had to ask the IT guy to reset my password every 12 months. The reset killed my history too and I was able to reuse the same 12 passwords the following years
Yup, that's what ends up happening. When you make it difficult/annoying for people to just do their job, they are going to find a way around it. It's best to let employees create their own unique password and leave them tf alone.
Na na na don't we all just take the PW and add an extra !
Yeah nobody can actually be bothered to change passwords on any kind of schedule or this will happen every time
The numbers in my passwords come from whatever book is to my left that day.