Re:Frequent reauth doesn't make you more secure
by eru on Thursday June 12, 2025 @09:50PM
(#44265040)
There's one weird trick to get people to have strong passwords (even if you force rotation): don't allow them to pick their own passwords. Randomly generate the passwords for them.
[ Parent
| on HN ]
Re:Frequent reauth doesn't make you more secure
by pixl97 on Thursday June 12, 2025 @09:56PM
(#44265067)
Also don't allow them to copy paste the password. And especially don't allow them to use any kind of password wallet. They will really love you for this and you won't get an excessive number of calls to reset forgotten/lost passwords.