Current Events > Change your password every 90 days

(+) Yeah! (+)

Password must contain a capital, a special character, and a number
Password cannot contain any recurring sequence of 3 or more characters from a prior password

what do you want from me

Changing your password every X amount of days isn't even best practice anymore.

My job does this every 60 days and it cannot be the same as your last 10 passwords

doesntcare posted...

My job does this every 60 days and it cannot be the same as your last 10 passwords

Password1
Password2
Password3
....
Password42

I change my password every 5 hours.

doesntcare posted...

My job does this every 60 days and it cannot be the same as your last 10 passwords

Same, it's bs.

I change my password every 5 seconds

TaylorHeinicke posted...

Password cannot contain any recurring sequence of 3 or more characters from a prior password

This implies the passwords are stored in plain text somewhere, instead of being hashed. That defeats the "security" of making everyone change it all the damn time, when someone could sneak in and get them all.

Lokison posted...

Password1
Password2
Password3
....
Password42

This is why "change password every x amount of days" method is no longer considered secure. It leads people to create insecure passwords. My company switched to MFA two years ago and I haven't had to change my password since.

BlazinBlue88 posted...

Changing your password every X amount of days isn't even best practice anymore.

Passwords themselves aren't even best practice anymore.