Drop password restrictions

tml · August 17th, 2015, 07:38 PM

Multiple studies have shown that password complexity rules are counter-productive.

In fact, the scheme you're using is called out in one study as one of the weakest at providing real password protection.

If you really want to provide protection, allow us to use two-factor auth; as it is, the password complexity rules are just frustrating to the end-user.

Parody · 07:51 PM

My password is Ctrl-Shift-Insert. (== gibberish filled in by a password manager.)

MNBlockHead · August 17th, 2015, 08:07 PM

Quote:

Originally Posted by Parody

My password is Ctrl-Shift-Insert. (== gibberish filled in by a password manager.)

As do I. I'm using Lastpass, love it!

MNBlockHead · August 17th, 2015, 08:15 PM

Quote:

Originally Posted by tml

If you really want to provide protection, allow us to use two-factor auth; as it is, the password complexity rules are just frustrating to the end-user.

I don't know. Most people find dual authentication just as frustrating. I use Google Authenticator to provide dual authentication protection to many of my more sensitive account. The app is on my iPhone, so generally always readily available and convenient to use. I have tried to convince many people to use dual authentication and have a near zero-percent success rate. Most people will not bother unless made to by their company.

A password-management application like Lastpass or Robocopy is generally a better bet for most people. They only need to remember one secure password/passphrase that is only used for the password management application and then they generate a different randomly generated, long, complex password for each website, service, or app that requires one.

weogarth · August 27th, 2015, 02:30 PM

Ok, sorta see calendars the point but I'm loathe calendars to expose the product calendars to scope creep. The web viewer calendars and content market must take priority.

AEIOU · August 27th, 2015, 06:08 PM

The game is tied to your Windows account already. Lock you desktop if you want to keep people out when you walk away. Dump the password. It's redundant and repetitive. At the very least, make it optional rather than required.

Parody · August 27th, 2015, 07:13 PM

Quote:

Originally Posted by AEIOU

The game is tied to your Windows account already. Lock you desktop if you want to keep people out when you walk away. Dump the password. It's redundant and repetitive. At the very least, make it optional rather than required.

You can't dump the password completely, as you need something for use with the web client. Remembering your password and logging in automatically has come up multiple times before. Here's a few of those:

Login ideas
Auto Login
Remember My Password/Auto-Login

Zaphod Beebledoc · August 27th, 2015, 10:55 PM

Quote:

Originally Posted by weogarth

Ok, sorta see calendars the point but I'm loathe calendars to expose the product calendars to scope creep. The web viewer calendars and content market must take priority.

Fixed that for you!

weogarth · August 28th, 2015, 12:23 AM

Quote:

Originally Posted by Zaphod Beebledoc

Fixed that for you!

Awww, you shouldn't have

All in good fun, Rob and co. Hope you all have a nice weekend

rob · August 28th, 2015, 12:34 AM

Quote:

Originally Posted by Zaphod Beebledoc

Fixed that for you!

Ah, you spoiled it. And here @weogarth was trying to be

SUBTLE

tml Junior Member Join Date: Sep 2014 Posts: 24 August 17th, 2015, 07:38 PM	Multiple studies have shown that password complexity rules are counter-productive. In fact, the scheme you're using is called out in one study as one of the weakest at providing real password protection. If you really want to provide protection, allow us to use two-factor auth; as it is, the password complexity rules are just frustrating to the end-user.
#1

Parody Senior Member Join Date: Jan 2013 Location: Rochester, MN Posts: 1,516 August 17th, 2015, 07:47 PM	My password is Ctrl-Shift-Insert. (== gibberish filled in by a password manager.) Michael Miller ESG Labs - Realm Works Locations App - Convention Events Last edited by Parody; August 17th, 2015 at 07:51 PM.
#2

weogarth Senior Member Join Date: Feb 2013 Posts: 303 August 27th, 2015, 02:30 PM	Ok, sorta see calendars the point but I'm loathe calendars to expose the product calendars to scope creep. The web viewer calendars and content market must take priority.
#5

AEIOU Senior Member Join Date: Jan 2012 Posts: 1,147 August 27th, 2015, 06:08 PM	The game is tied to your Windows account already. Lock you desktop if you want to keep people out when you walk away. Dump the password. It's redundant and repetitive. At the very least, make it optional rather than required.
#6