New NIST password guidelines: don't require character types or rotation

Re:New NIST password guidelines: don't require character typ... by Ajedi32 on Wednesday December 14, 2016 @09:29AM (#13176133)

This is what I used to do before I started using a password manager. Now I just change my password to a new, randomly generated one every month while my master password stays the same.

[ Parent | on HN ]

Re:New NIST password guidelines: don't require character typ... by kbart on Wednesday December 14, 2016 @09:37AM (#13176207)

Sure, but this method doesn't work when I need to login to my corporate PC at work.

[ Parent | on HN ]

Re:New NIST password guidelines: don't require character typ... by Ajedi32 on Wednesday December 14, 2016 @09:39AM (#13176220)

It does for me. KeePass on my phone + InputStick. I've even got a macro set up to enter all the necessary keystrokes so I can login with one tap. (Ctrl+Alt+Del -> Enter Password -> Enter)

[ Parent | on HN ]

Re:New NIST password guidelines: don't require character typ... by taco_emoji on Wednesday December 14, 2016 @01:02PM (#13178120)

Thank you for introducing me to InputStick!

[ Parent | on HN ]

Re:New NIST password guidelines: don't require character typ... by Ajedi32 on Wednesday December 14, 2016 @02:57PM (#13179140)

You're welcome. I discovered it myself only around 6 months ago, and so far I've found it to be very useful.

Their website lists a lot of different potential applications, but I use it almost exclusively for entering passwords from KeePass. In addition to allowing password entry on the computer's lock screen, it also saves me the trouble of having to read and retype passwords manually on computers that don't have KeePass installed, and avoids exposing my entire password database to the computer it's plugged into (as would be the case if I used portable KeePass on a USB memory stick).

[ Parent | on HN ]