Question about those 'mandatory' password changes every 90 days

My company's policy forced me to change my password again last month, so I just added a '1' to the end of my old one. The system accepted it, which basically made the whole rule pointless. Has anyone else's workplace actually found a way to make this work without people just using weak patterns?

3 comments

3 Comments

tessa_clark741mo ago

Honestly, my old job had the same rule and it was so annoying. They finally switched to using a password manager that generated strong ones for us, so we didn't have to remember new ones all the time. It actually worked way better because people couldn't just recycle the same base password.

rowan_roberts491mo ago

Oh man, same here! My last place did the password manager thing and it was a total game changer.

sarah53125d agoProlific Poster

Actually the whole point of changing passwords often was that people did recycle the same base password. The password manager just makes it easier to have totally different ones each time, not that people stopped recycling them.