LogFAQs > #963834214

hypnox posted...

My company is now requiring all passwords be EIGHTEEN DAMN CHARACTERS LONG

Most of mine are pretty close to that as-is. The real problem is if they require them to be strings of fully nonsense rather than actual words or things you can use mnemonics for.

Like, say, using the Ring verse from Tolkien (Three Rings for the Elven-kings under the sky, Seven for the Dwarf-lords in their halls of stone...), and then turning that into "TRftEkunsSftDlithos". That's a pretty complex password, but also one that's relatively easy to remember as long as you remember what the "key" is.



hypnox posted...

PLUS we have the stupid policy of passwords being changed every 90 days.... Looks like I will be one of those people with passwords freaking written down now.

The irony, of course, being that when you write your password down, it increases the risk that someone else can physically find it, steal it, or copy it (or you can just lose it), thus compromising security more than just having an easy to remember one.

That being said, a lot of this depends on just how important access to your work account is. I'd rather have rigorous security for someone working in a major bank, maybe less so for someone doing stock management data-entry for Wal-Mart or something.