LogFAQs > #963842030

Just to explain why some security guys think this is usefull:

The biggest threat is always using the same password.

You used your mail and password for cheapsite.com and cheapsite.com got hacked and didn't secure the password as it should? good job, your combination of mail + password is now totally insecure, no matter how strong the password was.

Happend to me too, using my spam mail (for sites I don't give a f) and most used password (for sites I don't give a f) on a site, and it got hacked. Years later, I created a Ubisoft account because I needed one for some game and...

It got hacked in under 2 hours. Because the mail+password in clear text was leaked and part of some hacker database, automatically attacking everything 24/7.

So, IT security wants to make sure that people don't use their company passwords multiple times in private use.

Sadly, the approach is always long passwords and changing it every time. That ensures that you will never use this password privatly. But the result is usually pretty lazy passwords, or passwords writen down next to the desk, INCREASING the risks.

In my old company, we had to change the password every month.

I swear, I'm sure you could hack 10% of all employees with trying "January2022" or similar passwords.