News for hackers. Stuff that matters.

A comment on NIST advises services to not require that passwords be changed periodically. Parent comment

Re:NIST advises services to not require that passwords be ch... by gruez on Saturday May 20, 2017 @02:55PM (#14383753)
Why even bother with these weird rules? just use a password manager, generate a secure (> 128bit entrop) password, and be done with it. Also, keepass has something like your keylogger foiling method, called "2 channel obfuscation".
[ Parent | on HN ]
Re:NIST advises services to not require that passwords be ch... by LinuxBender on Saturday May 20, 2017 @05:45PM (#14384520)
Use whatever option you are comfortable with. I know people that can't bother to use more than 1 password everywhere and certainly can't use more than 6 characters.
[ Parent | on HN ]