Too many password changes

[BrilloPad]

You think your password is secure? Read this – Telegraph Blogs

[NickFitz]

You think your password is secure? Read this – Telegraph Blogs

He seems to have missed the point of the Xkcd cartoon, which is that what he describes as "The current best advice" is in fact terrible advice, and that the multiple-unrelated-words technique is the "better system" he's waiting for "someone" to "work out".

[Robinho]

I have a keyboard pattern for mine and just adjust it around the keyboard to produce different passwords

[darmstadt]

No-one ever heard of SSO (single sign-on?) If I forget any I just ring up the security guy and he resets it for me. the only problem is that it is so difficult trying to think of a new password as the various systems remember your last few and you get messages saying that it is too similar to the old ones. For logging on to my desktop I have a smartcard and I'll not forget that one, then on my desktop I use a virtual Post-It note with all systems and passwords.

[Sysman]

I have a keyboard pattern for mine and just adjust it around the keyboard to produce different passwords

Both the good guys and the bad guys have already thought of that one.

Visualizing Keyboard Pattern Passwords

No-one ever heard of SSO (single sign-on?) If I forget any I just ring up the security guy and he resets it for me. the only problem is that it is so difficult trying to think of a new password as the various systems remember your last few and you get messages saying that it is too similar to the old ones. For logging on to my desktop I have a smartcard and I'll not forget that one, then on my desktop I use a virtual Post-It note with all systems and passwords.

The best clientco password system I used had a password protected smartcard for your desktop on which the usernames and passwords for internet access, help desk app, timesheet app, department server etc were stored, and automatic logins were done in those apps. One really nice feature of that system was you could use your smartcard to log onto almost any other PC in the company (e.g. in training and demo rooms), it would download your authorised apps and your desktop settings, and you were all set to go.

Oh yes, when you left your desk to grab a cup of coffee you whipped the smartcard out of the reader, and the screensaver would automatically kick in.

Unfortunately with it being a windows based thing, the SSO functionality didn't include non-Windows servers or desktops, but that was a decade ago.

[Sysman]

He seems to have missed the point of the Xkcd cartoon, which is that what he describes as "The current best advice" is in fact terrible advice, and that the multiple-unrelated-words technique is the "better system" he's waiting for "someone" to "work out".

He did indeed miss the point of the CORRECT HORSE BATTERY STAPLE cartoon he linked to. The cynic in me says that someone somewhere out there will indeed be using a mixed-case-with-numbers-and punctuation version of that such as Correct-h0rse,battery&staple

The ability to create Rainbow tables has also increased with the ability to use GPUs to process this sort of stuff in the background. Earlier this year I read of some hackers/crackers conference where the article was claiming that the majority of the audience were probably running some password cracking software in the background on their laptops while they were busy taking notes, twittering and so on.

[SimonMac]

He seems to have missed the point of the Xkcd cartoon, which is that what he describes as "The current best advice" is in fact terrible advice, and that the multiple-unrelated-words technique is the "better system" he's waiting for "someone" to "work out".

The full cartoon

[darmstadt]

The best clientco password system I used had a password protected smartcard for your desktop on which the usernames and passwords for internet access, help desk app, timesheet app, department server etc were stored, and automatic logins were done in those apps. One really nice feature of that system was you could use your smartcard to log onto almost any other PC in the company (e.g. in training and demo rooms), it would download your authorised apps and your desktop settings, and you were all set to go.

Oh yes, when you left your desk to grab a cup of coffee you whipped the smartcard out of the reader, and the screensaver would automatically kick in.

Unfortunately with it being a windows based thing, the SSO functionality didn't include non-Windows servers or desktops, but that was a decade ago.

Yep our ones do that as well and best of all they work on both Windows and Linux (my desktop is Ubuntu and was previously Redhat.) Also the smartcards are also used to pay in the canteen or shop or machines, you just load it up as you go and they work on the security system letting you into the building and rooms depending on the access level and are also used for clocking in! They do everything except wipe your bum in the toilet.

[BlasterBates]

I've listened to lots advice and my password is.....

difficultToRemember

[doodab]

I have a combined fingerprint and face recognition system.