Passwords - page 2
Do people expect to mistype their passwords?
Should you remember your passwords?Are passwords insecure?What are 3 things you should avoid when creating passwords? Should you remember your passw...
Forgotten passwords - should the temporary password expire?
The temporary password should absolutely expire. Having two passwords for one account is an inherent risk. Instead, you should have the temporary pass...
Would it be bad design (and unsafe) to put password guidelines next to a login box?
What should be avoided when coming up with passwords?Which password practice creates the most risk for compromising an account? What should be avoid...
Password policy best practices nist
NIST now recommends a password policy that requires all user-created passwords to be at least 8 characters in length, and all machine-generated passwo...