this post was submitted on 25 Aug 2024
564 points (98.6% liked)

Cybersecurity - Memes

1893 readers
5 users here now

Only the hottest memes in Cybersecurity

founded 1 year ago
MODERATORS
 

What is your favourite password rule?

you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 8 points 3 weeks ago (2 children)

at what point do password requirements start making password easier to crack?

[–] [email protected] 16 points 3 weeks ago

They already do. If I know a number is required, I don't have to try any passwords that don't have a number.

[–] [email protected] 3 points 3 weeks ago* (last edited 3 weeks ago)

They invariably do. They always constrain the list of things that a fully random generator could possibly make. They never add to that list.

Even rules like "can't use the same character twice in a row" constrain the list at least a little. That one makes it harder for dumb people to do dumb things, but also makes it harder for smart people to do smart things.