Poll of the Day > My work password sucks

(+) Yeah! (+)

I created a new, unique password with a capital letter, 5 more letters than my old one, and also more digits.

It got rejected because it didn't meet the length, complexity, or history requirements.

I took my curren password, which ends in a year and added 1 and it took it!

Heavens, ho! My work account is safe once more!

i hate when a site doesn't let me use a really long password... something like "joefishargonauttacobellagraxagatone"

I use the same temporary work password that was assigned to me years ago, which is basically a random sequence of characters and I've only been modifying the last character if I need to update it.

Correct horse battery staple?

It was the best of times, it was the worst of times?

pneumoultramicroscopicossilicovulcanoconiose?

slacker03150 posted...

Correct horse battery staple?

It was the best of times, it was the worst of times?

pneumoultramicroscopicossilicovulcanoconiose?

excellent password

I just increment the number at the end of my password every time I have to change it. That way I know exactly how long I've worked there because they make me change it every 3 months.

argonautweakend posted...

safe once more

I am assuming that you are employing the use of irony in this sentence.

One of my work passwords has to be exactly 8 characters long and include numbers, upper and lowercase letters, and a symbol. It's kind of silly.

adjl posted...

One of my work passwords has to be exactly 8 characters long and include numbers, upper and lowercase letters, and a symbol. It's kind of silly.

ya, if you are limited to 8 characters there's functionally no hacking difference between "aaa" and "(z|7hjE{+"

*forgot my password
*create a new password
*new password cannot be the same as your old password

Lokarin posted...

ya, if you are limited to 8 characters there's functionally no hacking difference between "aaa" and "(z|7hjE{+"

Indeed. It takes a couple orders of magnitude longer to crack a more entropic password, but at 8 characters, that's the difference between a microsecond and a millisecond. Now, three wrong guesses of that password does result in me being locked out and having to contact someone directly to unlock my account, so brute forcing the password isn't really an option, but the notion of having a maximum length (especially one so short) is still just weird.