News for hackers. Stuff that matters.
Re:49% of workers, forced to change passwords, reuse same on... by Insanity on Friday December 13, 2019 @03:47PM (#21785294)
How fast can you enter that password? Like, is it a reasonable time or are you basically pecking at your keys?
Re:49% of workers, forced to change passwords, reuse same on... by nwallin on Friday December 13, 2019 @06:07PM (#21786448)
I do passwords this way. At first, it's pretty slow, but after a while it's muscle memory: my fingers know my passwords better than my brain does.

I don't do passwords this way at work anymore, because they make us change it every 90 days. I just use keyboard patterns, and shift the pattern to the right for each successive password. Seriously people, expiring passwords is an idiotic idea.

Re:49% of workers, forced to change passwords, reuse same on... by jerf on Friday December 13, 2019 @06:39PM (#21786664)
I don't actually use 35-char passwords. That was just to answer the challenge. Mine are more on the order of 20.

It's fairly fast, actually. One of the things I've decided to do is trade some entropy for having only lower case letters and the minimum symbol count, because what tended to screw me up most was synchronizing the shift key with the rest of the password... which I suppose also gives a clue about the speed. It's at least no slower than a passphrase of equivalent strength, and it fits my brain.

But if passphrases work better for you, by all means, please do.

Also, I have a password manager. I only have about 4 of these at any given time, and I can afford the cognitive burden of ensuring they are all very strong. It'd be a different problem otherwise.