This is topical because I just got one of these emails.
Nobody is going to bother guessing that I would be stupid enough to use a four character password. It’s good enough for my bank and my phone, so it’s good enough for my computer. (/s)
At least now they recommend pass phrases instead of words, but the examples were contradictory and they wrote all the words in 13375p34k
I let the users choose whether they want pass phrases or classic cryptic passwords. So far nobody wanted passphrases, because apparently they can’t do 10 finger system typing. Next step will be self-service passwords & MFA once we fixed the major issues around here.
This is topical because I just got one of these emails.
Nobody is going to bother guessing that I would be stupid enough to use a four character password. It’s good enough for my bank and my phone, so it’s good enough for my computer. (/s)
At least now they recommend pass phrases instead of words, but the examples were contradictory and they wrote all the words in 13375p34k
I let the users choose whether they want pass phrases or classic cryptic passwords. So far nobody wanted passphrases, because apparently they can’t do 10 finger system typing. Next step will be self-service passwords & MFA once we fixed the major issues around here.
That’s interesting.
I always found yubikeys cool