News for hackers. Stuff that matters.

A comment on Microsoft says mandatory password changing is “ancient and obsolete” (2019). Parent comment

Re:Microsoft says mandatory password changing is “ancient an... by Causality1 on Monday April 19, 2021 @07:19PM (#26868952)
Most of the people I know use some kind password they can derive if they forget it. Like their password for Company A will be the city the company was founded, city the founder was born, and the month/day it was founded. The ones who have to change it because of policy pick something iterative, like the first line of a song, then the second, etc.
[ Parent | on HN ]
Re:Microsoft says mandatory password changing is “ancient an... by cmeacham98 on Monday April 19, 2021 @07:30PM (#26869036)
Most of the people you know are well outside the normal then.

In my experience the average password consists of 1-3 words with some meaning to the user, sometimes either in 1337speak or followed by numbers/symbols if the password policy requires them.

[ Parent | on HN ]
Re:Microsoft says mandatory password changing is “ancient an... by KeepFlying on Monday April 19, 2021 @09:37PM (#26869827)
I'm with you on this. I know very few people who generate passwords like that and most people I know use some simple "special word with special number" pattern. Often it's kids names, a random word they picked as a password years ago and have been reusing, and some part of their pin number.
[ Parent | on HN ]
Re:Microsoft says mandatory password changing is “ancient an... by dunham on Monday April 19, 2021 @10:22PM (#26870040)
In the past, I used a grid of random characters (a tabula recta) that I keep in my wallet, plus an algorithm for pulling passwords out of it. This system broke down when I was forced to change passwords on various sites.
[ Parent | on HN ]