Password etiquette

[jace]

I'm standing in queue at my bank to encash a self cheque, because, for once, the transaction has to be done faster than online transfer between banks affords

Comments

[skjaidev]

For sites that require changing passwords every 15 days, I change password twice when I have to and revert to my original one. Thankfully most of these don't remember previous passwords / md5 etc. BTW, NSE/SEBI requires 15 day password expiry for all online trading accounts.

I'm gonna resist biometrics as long as I can. I'd rather have my eye / finger than my money / email.

[chaitrasuresh]

What do you do when at work, you're asked to reset your password every month and that new password takes one whole day to 'percolate' into every place that might need it(CVS, intranet blah blah) and you're forced to remember both the passwords in the meantime and keep doing hit-miss thingie!!! :( !(*&(#*%@#@

[vaishaksuresh]

We have to change our password every 45 days or so, and it percolates in 15 min or less. bu the problem is that you cannot repeat the past 12 passwords :(

[deponti]

"Some may say that this will all change with biometrics. I don't buy that. Biometrics will face far more resistance than passwords because it conflates identity with authorisation. It requires changing the fundamental trust patterns of society, which is not an easy sale."

Could you explain that...I didn't understand...I,personally, would like biometrics, because my iris or my finger is unique...

[jace]

Your biometric signature is a facet of your identity. That means if it is ever stolen, you can't do anything about it

[deponti]

Thanks, that explained it much better. I had thought only as far as recognition, and had not thought of the digitalization which can then, as you say, be replicated...

You make me think, Jace, and thank you for that.

[fus]

i disagree
offline

[jbritto]

I was totally annoyed when icicidirect started insisting that I change the password every fourteen days. Apparently some bright soul at the NSE thought that this was the best way to increase security.

[teemus]

I like HSBC's approach to online banking - password + RSA token.

[thaths]

Can you recommend a good password manager on OSX? Something that can interoperate with Revelation password manager would be nice, but not required.

[jace]

I'm quite happy with OSX's Keychain Access, the in-built manager.