How secure is your password and PIN?

[zamicro]

I'm strongly against password-expiry (how most corporate environments require you to change to your password every x amount of days).
I believe (and I'm not the only one) that, far from improving security, it leads to less secure passwords (like September in September) or people having to write down their passwords to remember them.
Rather make up a strong password once, then a weak one every month.

I'm sure someone will disagree with me, but that's my opinion...

Yes this expiration thing is a bitch. And another thing is when they do not allow recurring characters.

 

[NetDude]

Yes this expiration thing is a bitch. And another thing is when they do not allow recurring characters.

Not really... It's for your own protection.

It depends what the password is used for. No need to change your Internet banking password regularly. In fact, I have never changed my password since I created it years ago. If someone gets hold of my banking password they will use it immediately and I will know soon enough. BUT, if they get hold of my company's network password, and I don't change it regularly, they may come in and out of the network stealthily while still planning "an attack." It may be months before we find out about it. But if I change regularly, definitely not every 30 days, they may be restricted next time they try to use it.

 

[Wall]

I have a password which I use for all my accounts. PC login, Gmail, Facebook, mybb. everything. It is however 13 characters which have uppercase, lowercase, numbers + special characters

 

[zamicro]

I have a password which I use for all my accounts. PC login, Gmail, Facebook, mybb. everything. It is however 13 characters which have uppercase, lowercase, numbers + special characters

The problem with this, is that you have to trust ALL those sites, and hope that they will let you know if their security is breached.