News for hackers. Stuff that matters.
Re:Microsoft says mandatory password changing is “ancient an... by jackson1442 on Monday April 19, 2021 @01:29PM (#26865517)
Exactly. My university requires a yearly password update. I have to manually enter my password to log into computers, print release stations, a billion domains that just use an LDAP connector instead of our Shibboleth page, servers after home directory wipes, etc.

My password needs to be something I can quickly type, so I just use the same one (a strong, multiple-word passphrase) and add its validity period to the end.

This actually makes hitting arbitrary password requirements easy too; make one word capitalized (or one lowercased), separate each with an allowed symbol, and the validity period is numeric so it passes just about every security check while being easy to type and remember.

There are no comments on this comment yet.