82
JS96
6y

- Password can't contain less than 3 chars
- Password can't contain more than 12 chars
- Password must contain only alphabetical and numerical chars
- Password must contain at least one uppercase letter
- Password can't contain a sequence of repetitive chars
- You already used this password in the past
- Password can't contain parts of passwords already used in the past
- Password can't contain your name, birthday or any other personal information
- Password can't be an anagram
- This password is too weak

"Remember that you have to update your password every 6 months".

Who the fuck has enough imagination to invent a new password that meets all these requirements every fucking 6 months?
And if so, how the fuck you can also remember it?

Fuck off… I don't really need access to my university account, right? 😡

Comments
  • 14
    LastPass?
  • 13
    How about using a password manager and use password generators?
  • 5
    Password generator set with same rules 🧐

    Although 3-12 chars isn’t a lot to work with.
  • 6
    How to set sensible password requirements for a service without annoying the fuck out of one's users? 🤔
  • 12
    Correct horse battery staple changed my attitude towards passwords. Randall was right, I've never forgotten it.

    We've grown up with these ridiculous requirements so we've been brainwashed into thinking it's The Right Way. Set password length to 16 and remove all other requirements.
  • 4
    @Buggz Exactly that. Length is far more important that complexity. But try telling that to all of the services out there that stick to their archaic beliefs 🙄

    Because it's just inhuman to keep changing your password, I try to pick a strong base and then increment it with numbers. Maybe it's not the most secure, but it works really well at least for non-sensitive services.
  • 1
    @athlon I really can't convince myself that this kind of services are secure, and the fact that with one single password someone can get access to all of them doesn't help.
  • 2
    Really pisses me off too...
    What I like to do is to have one password that meets the said requirement with roughly equal no of lowercase/uppercase and/or number/special chars. When there is time for a new password, I just use the SHIFT key and voila...

    Only Caveat though is that now I have to remember the shift key sequence but that can be easily managed by using some sort of pattern or may be keep a hint on a piece of paper just enough to map the dots and dashes 😉
  • 6
    Someone should actually calculate how many possibilities that leaves the user with :)
  • 1
    @n4m31ess-c0d3r on this website it would be consider too similar to the old one, it can’t contains parts of old password
  • 1
    @JS96 Use KeePass for your passwords then. It's a local encrypted DB.
  • 0
    @JS96 tough luck... Only if you were allowed to use special chars, then you could have dropped them in b/w the alphabets and then when switched with shift, these would become numbers and vice-versa...
  • 0
    @TheOct0 its have been a long time since I did some maths, but if I'm not wrong this would be a p&c problem:
    n - length of pwd,
    r - no of shift key uses
    Combinations = nCr = n! / (r! * (n-r)!)
  • 3
    @n4m31ess-c0d3r I honestly have no idea, I'd need to seriously get a paper and a pen to even get this started because I left maths a long time ago :/
  • 3
    "Parts of passwords you aleredy used"
    Ok 1) What do you mean like every single letter
    and 2) HOW DO THEY KNOW
  • 1
    @WIPocket
    1) It can't contain more than 3 or 4 same consecutive chars.
    2) They probably decrypt the old passwords on server and make a one to one check…
  • 2
    @JS96 Wait...
    Decrypt...
    Password...

    I would run.
  • 2
    @JS96 @WIPocket fuck that's right.
    Either they decrypt the password or they are storing the passwords without hashing. Else they won't be able to match a substring that was previously saved.
  • 3
    Easy.
    Go to a bar, order a beer.
    Create password with first 4 chars of bar name 4 chars of street name + number, throw in some special char and your done.

    And if you forget it you can go on a password recovery quest (including beer)
  • 1
    Every 6 months!!I have to do that every month.. 🙁 Lucky you
  • 2
    Not allowing more then 12 is stupid
  • 2
    People with no life are the only ones that can do this.
Add Comment