← Back to context

Comment by pcardoso

1 day ago

I once wrote a script to change my password randomly X times and then back to my original password. Worked like a charm.

11 comments

pcardoso

Reply
claudex  1 day ago

There are policies to prevent changing the password more than once a day to prevent that. I've encountered it in several places

  • thih9  1 day ago

    Fascinating. In other words:

    In order to force the user to change their password more frequently (long term), the user is prevented from changing their password too frequently (short term).

    I wonder whether the person who added that is actually confident that the benefits outweigh the drawbacks or is that a case of tunnel vision.

  • eqvinox  1 day ago

    There are also systems that keep a history of old passwords just to prevent you from reusing one.

    • jandrese  21 hours ago

      I like the ones that not only keep a history of your old passwords but will reject any password that is similar to any of your 30 previous passwords, which means they're storing either a plaintext or reversibly encrypted list of every password somewhere on the system. Talk about a goldmine for the hacker that dumps that database.

      6 replies →