612
submitted 3 months ago* (last edited 3 months ago) by nokturne213@sopuli.xyz to c/privacy@lemmy.ml

Not only does the credit bureau max out their password length, you have a small list of available non-alphanumeric characters you can use, and no spaces. Also you cannot used a plused email address, and it had an issue with my self hosted email alias, forcing me to use my gmail address.

Both Experian and transunion had no password length limitations, nor did they require my username be my email address.

Update: I have been unable to log into my account for the last 3 days now. Every time I try I get a page saying to call customer service. After a total of 2 hours on hold I finally found the issue, you cannot connect to Equifax using a VPN. In addition there is no option for 2FA (not even email or sms) and they will hang up on you if you push the issue of their security being lax. Their reasoning for lax security and no vpn usage is "well all of our other customers are okay with this".

you are viewing a single comment's thread
view the rest of the comments
[-] filcuk@lemmy.zip 8 points 3 months ago

Yeah, it's counterproductive to lay out a bunch of restrictions. Let people make a long-ass password that's a memorable phrase - it's safer anyway.

Although I don't know how anyone makes it without a password manager at this point.

[-] sylver_dragon@lemmy.world 8 points 3 months ago

I don’t know how anyone makes it without a password manager at this point.

Password reuse. Password reuse everywhere.

[-] AceFuzzLord@lemm.ee 2 points 3 months ago

We're all guilty of it. No shame in admitting it. I know I've been guilty of it from time to time.

[-] nokturne213@sopuli.xyz 3 points 3 months ago

When I have to sign up for something on my phone I will use my pre Bitwarden default password. Then once I have a sec to sit down iPad or laptop I will change it to something more secure.

I am currently fighting with my wife and children to start using a password manager.

[-] AceFuzzLord@lemm.ee 5 points 3 months ago

The funny thing about that is that I am currently on my laptop getting keepassxc set up. This post has somehow motivated me to finally get a password manager.

[-] nokturne213@sopuli.xyz 2 points 3 months ago

If it converts one person that is a good thing.

[-] filcuk@lemmy.zip 3 points 3 months ago

On your phone, you can select autofill, then ask bitwarden to generate a password, save and use that to register

[-] UniversalMonk@lemmy.world -3 points 2 months ago

What's the best password manager you'd recommend?

[-] nokturne213@sopuli.xyz 2 points 2 months ago

I have only used lastpass (they have had several breeches and I do not recommend them), Bitwarden (my current daily driver and my recommendation), and I have used Apple keychain a little for passwords at work that my wife can access without having full access to my Bitwarden.

[-] UniversalMonk@lemmy.world -3 points 2 months ago
[-] nokturne213@sopuli.xyz 2 points 2 months ago

I have heard really good things about proton pass too, but I have never used it. I use proton mail and VPN, trying to space my security between providers.

this post was submitted on 21 Aug 2024
612 points (98.0% liked)

Privacy

32120 readers
388 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago
MODERATORS