Drop password restrictions
 

Multiple studies have shown that password complexity rules are counter-productive.

In fact, the scheme you're using is called out in one study as one of the weakest at providing real password protection.

If you really want to provide protection, allow us to use two-factor auth; as it is, the password complexity rules are just frustrating to the end-user.

My password is Ctrl-Shift-Insert. (== gibberish filled in by a password manager.)

As do I. I'm using Lastpass, love it!

I don't know. Most people find dual authentication just as frustrating. I use Google Authenticator to provide dual authentication protection to many of my more sensitive account. The app is on my iPhone, so generally always readily available and convenient to use. I have tried to convince many people to use dual authentication and have a near zero-percent success rate. Most people will not bother unless made to by their company.

A password-management application like Lastpass or Robocopy is generally a better bet for most people. They only need to remember one secure password/passphrase that is only used for the password management application and then they generate a different randomly generated, long, complex password for each website, service, or app that requires one.

Ok, sorta see calendars the point but I'm loathe calendars to expose the product calendars to scope creep. The web viewer calendars and content market must take priority.

The game is tied to your Windows account already. Lock you desktop if you want to keep people out when you walk away. Dump the password. It's redundant and repetitive. At the very least, make it optional rather than required.

You can't dump the password completely, as you need something for use with the web client. Remembering your password and logging in automatically has come up multiple times before. Here's a few of those:

Login ideas
Auto Login
Remember My Password/Auto-Login

Fixed that for you! ;):p

Awww, you shouldn't have :D

All in good fun, Rob and co. Hope you all have a nice weekend :)

Ah, you spoiled it. And here @weogarth was trying to be


:p