you are viewing a single comment's thread
view the rest of the comments
[–] 6 points 1 year ago* (1 child)

It's actually even outright discouraged by NIST.

For those who don't see the reason why, forced password resets lead to users using predictable passwords like "password2025october", "password2025november", etc.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 3 points 1 year ago

    Yep. Back when I was being forced to reset my passwords every 90 days, I needed some way to remember the new password, so I developed a strategy like that. Whatever beverage is currently on my desk plus @ plus the time. Water@1257, for example. It's so nice to have the option to randomly generate a strong password these days.

  • source
  • parent