Password Requirements: Myths and Madness

Re:Password Requirements: Myths and Madness by bombcar on Thursday December 22, 2022 @09:55PM (#34101867)

B2B is worse because EVERYONE shares business accounts with other people at the business. And so the usernames passwords and even two factor setups are passed around like coffee.

“Oh use bobs login for that, the standard password but add a ! for reasons”

[ Parent | on HN ]

Re:Password Requirements: Myths and Madness by vanviegen on Friday December 23, 2022 @01:00AM (#34102729)

That's what you get when vendors charge per seat.

[ Parent | on HN ]

Re:Password Requirements: Myths and Madness by bombcar on Friday December 23, 2022 @08:46AM (#34105723)

I have a sneaking suspicion that Salesforce is pushing 2FA so hard to sell more seats. And $6k/yr/pop it’s gotta be tempting to share a password …

[ Parent | on HN ]

Re:Password Requirements: Myths and Madness by Symbiote on Friday December 23, 2022 @03:45AM (#34103643)

I hadn't realised how many of these logins we had.

The request for a company-recommended password manager came from every department except IT, I think because the companys IT deal with are generally better at supporting multiple accounts.

[ Parent | on HN ]

Re:Password Requirements: Myths and Madness by nicoburns on Friday December 23, 2022 @06:37AM (#34104713)

We setup bitwarden at work, and it was absolutely fantastic for these sorts o shared accounts. You could have all the password be telling random strings, and control who had access to them with a convenient UI. Password rotation became a lot easier too, because all you had to do was update the password in the password manager and everyone would have the new one.

[ Parent | on HN ]