Man who made passwords hard regrets rules that 'drive people crazy'

Re:Man who made passwords hard regrets rules that 'drive peo... by Dylan16807 on Wednesday August 09, 2017 @11:57PM (#14976206)

Right about what, specifically? Being random is good. Being short wasn't part of the rules. Rotation is pretty bad. And words don't fix the core problem of making a good password because people love picking non-random words.

In general, every two random characters is worth as much as one random word. I personally find it as easy to remember three random characters as a word, so I get better mileage out of random characters.

[ Parent | on HN ]

Re:Man who made passwords hard regrets rules that 'drive peo... by forapurpose on Thursday August 10, 2017 @01:19AM (#14976667)

> Rotation is pretty bad

Rotation is great if it's implemented correctly. The problem is that it's too much of a burden on users, therefore they implement it poorly, and then it's less useful or a weakness.

[ Parent | on HN ]

Re:Man who made passwords hard regrets rules that 'drive peo... by eksemplar on Thursday August 10, 2017 @02:50AM (#14977091)

Rotation makes people pick things like Winter2017 or write it down, and it offers little safety because being compromised for 3 months isn't that much better than being compromised for a year.

[ Parent | on HN ]