In 2003, Bill Burr wrote “NIST Special Publication 800-63. Appendix A” – a security document that recommended passwords be changed every 90 days, and have irregular caps and special characters. When asked about it, and the resultant trends in people adding !@#$%^&*() to the end of their passwords, Burr said something enlightening:
Lmao
so yeah I hit the Bitwarden generate button and forget
I just use the last 12 digits of pi for all my passwords. So easy to remember!
So you found them huh?
Lol, like there is.
Six months ago, as the wrong password message happily reminds me regularly.
What Google password?
I don’t intend to browse RMS-style, but I have zero need of a Google account, nor of the major search engines directly.
I just add layers between myself and that particular company. I still can get their data, but without the creep factor.
Mostly.
It’s an imperfect solution, but I’m more comfortable with access by proxy than direct access.
Which phone OS are you using?
Years ago. Google changes the ways to sign in more frequently. 2FA messages, authenticator, then confirming sign-in on a separate device, which now seems to have been standardized as passkeys.
A couple of years ago. It’s like 30 random characters generated by a password manager, and i have 2fa on. Far more secure than my silly emails warrant. There’s not much there worth stealing.
I try to change it every other year or so. Then I forget it because I did not type it in and have to reset it to the old one.
After 5 times of this I’ve just given up and won’t change it until my password is in a common password dictionary
It is unique and I have MFA enabled so it hasn’t changed in a very long time. As per current security best practices.
Same.
Nice try hackerman.
2024-01-22T12:29:54
CHANGED passw0rd123! TO passw0rd1234!
Oh cool, Lemmy automatically obfuscates your password. All I see is *************!
*************!
All I see is **************
hunter2
******* here
Much more secure 👍🏾
Just changed it to hunter3, thought it was time I should upgrade security
But I’m only seeing *******. I guess that’s because it’s your password not mine.
(rip bash.org)
3 is actually a really easy number to guess (first prime after 2, number of people in a threesome, etc.). You should probably go with 4.
Nice try
Five minutes after reading this post.
2013-06-13T17:34
Alright, I have no idea. It’s probably been around ten years since I’ve deleted it.
stardate 41153.7.