We’ve all been there.

  • SSTF
    link
    fedilink
    English
    11
    edit-2
    1 year ago

    Unfortunately a lot of jobs require passwords and they use outdated security processes, forcing people to have the old fashioned “must have uppercase, lowercase, number, and special character & you have to change it every 3 months for no reason” passwords instead of the stronger (and less annoying) alternatives.

    • funkless
      link
      fedilink
      English
      101 year ago

      i signed up at mba.com and it wouldn’t let me use a password because it contained a semicolon which wasn’t on the approved list of special characters, and then - get this - because I tried too many times to create a password - locked me out because I had “too many failed attempts”

    • @CoderKat@lemm.ee
      link
      fedilink
      English
      71 year ago

      Those requirements drive me crazy, especially because they’re all against NIST recommendations. Someone thinks they make passwords more secure but they have the opposite effect.

      At any rate, password managers still help in those cases. If nothing else, for providing a safe place to record what your password is for when you forget it because of the dumb requirements.

      • SSTF
        link
        fedilink
        English
        41 year ago

        I always wonder if such choices come from incompetent IT, or if IT wants to do things better but is banging their heads against corporate owners who think “more hassle = more secure”.

        • peto (he/him)
          link
          fedilink
          English
          11 year ago

          It’s almost certainly that writing security standards for an organization takes time and needs approval from high up. And someone high up complaining that they only just revised them to include special characters.

    • @mikiao@lemmy.world
      link
      fedilink
      English
      51 year ago

      Must be changed every month, can’t use a previous password, AND, for some fucking reason, can only contain 8 characters.

      And if you forgot your password, you can call IT and they’ll just read it to you because they have them all saved somewhere.

      That was a great place to work at.

    • @darkkite@lemmy.ml
      link
      fedilink
      English
      51 year ago

      that’s exactly why a password manager works. there’s a generator that you can configure to meet requirements