822
you are viewing a single comment's thread
view the rest of the comments
[-] miss_demeanour@lemmy.dbzer0.com 26 points 4 days ago* (last edited 4 days ago)

I was driving limo and the CEO client (who I knew quite well, client-wise) spent the first 30 minutes of a trip on the phone insisting that his original password be restored, as the 'system' was insisting it be changed.
He told me he has to repeat this every 4 months...

[-] Drusas@fedia.io 22 points 4 days ago

To be fair, simply forcing users to create a new password every X weeks is bad security policy.

[-] echodot@feddit.uk 7 points 4 days ago* (last edited 4 days ago)

It is and it's actually not even recommended best practise to change passwords anymore precisely because of this. It hasn't been considered best practise since I think around 2016-17 so businesses are really lagging.

If you get governmental contract work and pretty sure not resetting the passwords too often is actually now part of the security requirement but outside of that businesses just do what they think is best regardless of research.

[-] Opisek@piefed.blahaj.zone 5 points 4 days ago* (last edited 4 days ago)

It's actually even outright discouraged by NIST.

For those who don't see the reason why, forced password resets lead to users using predictable passwords like "password2025october", "password2025november", etc.

[-] Drusas@fedia.io 3 points 3 days ago

Yep. Back when I was being forced to reset my passwords every 90 days, I needed some way to remember the new password, so I developed a strategy like that. Whatever beverage is currently on my desk plus @ plus the time. Water@1257, for example. It's so nice to have the option to randomly generate a strong password these days.

this post was submitted on 10 Oct 2025
822 points (100.0% liked)

Memes

12626 readers
1149 users here now

Post memes here.

A meme is an idea, behavior, or style that spreads by means of imitation from person to person within a culture and often carries symbolic meaning representing a particular phenomenon or theme.

An Internet meme or meme, is a cultural item that is spread via the Internet, often through social media platforms. The name is by the concept of memes proposed by Richard Dawkins in 1972. Internet memes can take various forms, such as images, videos, GIFs, and various other viral sensations.


Laittakaa meemejä tänne.

founded 3 years ago
MODERATORS