“Why are the stupid rules there in the first place? Because someone had to tick a compliance box”
I hate passwords with a vengeance. In the main because they are so badly abused, from a security perspective, by so many people. I’m not just talking about the person on the Clapham omnibus who keeps their passwords simple and shared between multiple accounts and services, but service providers as well.
In 2022, I would have liked to think that the days of stupidly short character limits, along with rules forbidding special characters, would be long gone, but that’s not the case. Yes, Virgin Media, I’m looking firmly in your “email passwords can be no longer than ten digits and contain no special characters” direction.
Of course, Virgin Media isn’t the only outfit that’s in strong password denial. It’s still possible to find those who see password creation as some kind of Krypton Factor challenge where you have to use at least one number, upper case and special character, except for certain banned special characters of course, oh and no repetition, all within a given maximum length password.
Not only is this daft, it’s also insecure: it makes it easier for those who would crack your password to do just that. If I know the
