News for hackers. Stuff that matters.

A comment on Why don't we expire passwords on the web?. Parent comment

Re:Why don't we expire passwords on the web? by bryanlarsen on Monday December 13, 2010 @10:59AM (#2000816)
Schneier actually recommends writing your password on a piece of paper in your wallet. (even better, just a hint).
[ Parent | on HN ]
Re:Why don't we expire passwords on the web? by kgo on Monday December 13, 2010 @12:30PM (#2001205)
I don't think Schneier recommends a hint. That's only good if your password sucks to begin with.

And it's not the 'writing down' part that's a security risk, it's the 'storing in an insecure location' that is. Password in wallet, fine. Password post-it stuck to monitor, not fine.

[ Parent | on HN ]
Re:Why don't we expire passwords on the web? by bryanlarsen on Monday December 13, 2010 @12:34PM (#2001225)
"If you can't remember your passwords, write them down and put the paper in your wallet. But just write the sentence - or better yet - a hint that will help you remember your sentence. "

http://www.guardian.co.uk/technology/2008/nov/13/internet-pa...

[ Parent | on HN ]