We’ve all been there.

  • CoderKat@lemm.ee
    link
    fedilink
    English
    arrow-up
    7
    ·
    1 year ago

    Those requirements drive me crazy, especially because they’re all against NIST recommendations. Someone thinks they make passwords more secure but they have the opposite effect.

    At any rate, password managers still help in those cases. If nothing else, for providing a safe place to record what your password is for when you forget it because of the dumb requirements.

    • SSTF@lemmy.world
      link
      fedilink
      English
      arrow-up
      4
      ·
      1 year ago

      I always wonder if such choices come from incompetent IT, or if IT wants to do things better but is banging their heads against corporate owners who think “more hassle = more secure”.

      • peto (he/him)@lemm.ee
        link
        fedilink
        English
        arrow-up
        1
        ·
        1 year ago

        It’s almost certainly that writing security standards for an organization takes time and needs approval from high up. And someone high up complaining that they only just revised them to include special characters.