420
Fuckin' passwords (lemmy.dbzer0.com)
top 27 comments
sorted by: hot top controversial new old
[-] e8d79@discuss.tchncs.de 21 points 6 days ago

Especially when getting it wrong a third time means that you have to do the walk of shame to the IT help desk.

or restart and try again (this often works, idk why)

[-] e8d79@discuss.tchncs.de 6 points 6 days ago

It locks both your smartcard and your user account, there is no way around that.

[-] Toes@ani.social 2 points 6 days ago

I had a director that just couldn't do it. Took 47 tries for him to login. Didn't matter what computer they used. I checked to make sure there wasn't any outside source locking them out. They just weren't able to do it.

[-] dabaldeagul@feddit.nl 3 points 5 days ago

New security measure: if the director logs in using 46 or fewer attempts, their account gets locked.

[-] Cenzorrll@lemmy.world 1 points 6 days ago

New password week for me!

[-] Almacca@aussie.zone 12 points 6 days ago* (last edited 6 days ago)

My workplace made us change our passwords to have a minimum of 14 characters, including upper and lower case letters, at least one number and one special character, with the 'benefit' being that we only have to change it annually rather than every 3 months. We also have to lock our computers every time we walk away from them, which I have to do 20 or more times a day, requiring entering the password to unlock it. This meme is my version of hell.

[-] ExcessShiv@lemmy.dbzer0.com 7 points 6 days ago

This i a very reasonable and good way to handle corporate IT security on the device level. This is how most places should be doing it.

[-] Rai@lemmy.dbzer0.com 2 points 5 days ago

It’s so easy to remember long passwords if you just use full-ass sentences with some random other stuff that relates to your mind. My BitWarden master password is like 32 characters and I can type it in a couple seconds, and if I was in a coma for a year I would wake up and instantly remember it.

The only problem is, it spawned from a funny story in my life that I can no longer tell. Ah well, it’s worth it.

[-] BanMe@lemmy.world 2 points 5 days ago

Zero trust framework actually no longer calls for routine password changes, it's considered an ITIL best practice not to now, because it encourages people to write them down. Instead solid MFA for password situations and, properly, getting rid of passwords in the next few years.

But a lot of places are still outdated in this.

[-] Almacca@aussie.zone 1 points 6 days ago* (last edited 6 days ago)

I'm not arguing with that. It's more a comment on my typing skill, or lack thereof, and how often I have to enter it.

[-] Clent@lemmy.dbzer0.com 3 points 5 days ago

Password111!!!

I guarantee most of the passwords at your company follow the patern of: first letter capitalized of some password they use everywhere, followed by a number, then a special character that is the shift characters on the number row.

If they make you change them ever x months with history going back, they are all incrementing until they rotate back to 1.

Humans created passwords are very predictable.

[-] Almacca@aussie.zone 1 points 5 days ago

:sheepish look:

[-] blinfabian@feddit.nl 4 points 5 days ago

i work at an IT department where ppl keep complaining about these things. your password WILL be secure and you WILL like it

[-] corsicanguppy@lemmy.ca 3 points 6 days ago* (last edited 2 days ago)

Ours was the same. But they reneged on the 'annual' part.

[-] HotsauceHurricane@lemmy.world 8 points 6 days ago

I am in this picture and I do not like it

[-] hodgepodgin@lemmy.zip 2 points 5 days ago

oh my lawd does that laptop have two nics?

[-] trxxruraxvr@lemmy.world 4 points 6 days ago
[-] helvetpuli@sopuli.xyz 10 points 6 days ago

Just to be clear: there is no reason anybody should be typing a password in 2025, other than maybe their master password for a keyvault. Also, 14 characters is not secure*. It needs to be at least 16, and that's if you generate it randomly.

Four randomly selected words, XKCD style is also good

  • according to Jeremi M Gosney, yer best source for password cracking and defense
[-] Ashiette@lemmy.world 2 points 6 days ago

Aren't dictionary bruteforcing really efficient ?

[-] LarsIsCool@lemmy.world 1 points 5 days ago
[-] helvetpuli@sopuli.xyz 2 points 5 days ago

In the context of things that rely on passwords for security it matters very much.

The Microsoft blog post that you reference is about their systems which displace that reliance, for both better and worse.

[-] helvetpuli@sopuli.xyz 3 points 6 days ago

Exactly. I use KeepassXC, but Bitwarden is also good.

[-] stinky@redlemmy.com 1 points 6 days ago

we keep doing this in QA and having to change it because it gets locked on the third attempt

this post was submitted on 09 Oct 2025
420 points (99.3% liked)

Memes

12645 readers
1701 users here now

Post memes here.

A meme is an idea, behavior, or style that spreads by means of imitation from person to person within a culture and often carries symbolic meaning representing a particular phenomenon or theme.

An Internet meme or meme, is a cultural item that is spread via the Internet, often through social media platforms. The name is by the concept of memes proposed by Richard Dawkins in 1972. Internet memes can take various forms, such as images, videos, GIFs, and various other viral sensations.


Laittakaa meemejä tänne.

founded 3 years ago
MODERATORS