NIST advises services to not require that passwords be changed periodically

Re:NIST advises services to not require that passwords be ch... by 5706906c06c on Saturday May 20, 2017 @01:09PM (#14383306)

The problem is that most have adopted password managers and two-factor, which means the guideline will be largely ignored.

[ Parent | on HN ]

Re:NIST advises services to not require that passwords be ch... by interfixus on Saturday May 20, 2017 @01:19PM (#14383360)

Most? Do you really think so?

In my experience, the vast majority of everybody is still bumbling ahead with post-it notes and simple, memorised passwords shared all across the board.

[ Parent | on HN ]

Re:NIST advises services to not require that passwords be ch... by 5706906c06c on Saturday May 20, 2017 @04:11PM (#14384123)

I'm so sorry for you and your job, I guess.

[ Parent | on HN ]

Re:NIST advises services to not require that passwords be ch... by sndean on Saturday May 20, 2017 @10:25PM (#14385397)

The first reasonable statistic that I could find was 1%, for the percentage of individuals in a large organization that used password managers [0]. Or maybe it's 8%, in a survey [1]. That 1% figure is pretty old, and people lie in surveys, so it's possibly >1% and <8%.

The vast majority of people don't use password managers (or 2FA).

[0] https://www.internetsociety.org/sites/default/files/08%20why...

[1] https://www.passwordboss.com/news/survey-finds-vast-majority...

[ Parent | on HN ]

Re:NIST advises services to not require that passwords be ch... by jjawssd on Saturday May 20, 2017 @01:25PM (#14383388)

What is your definition of most? 1%?

[ Parent | on HN ]

Re:NIST advises services to not require that passwords be ch... by 5706906c06c on Saturday May 20, 2017 @04:12PM (#14384127)

1%? What does that mean?

[ Parent | on HN ]

Re:NIST advises services to not require that passwords be ch... by raarts on Saturday May 20, 2017 @07:23PM (#14384908)

Isn't that obvious? 1% of all users.

[ Parent | on HN ]