Too many password changes

[escapeUK]

Generally these policys are a consequence of a very bitter IT manager who (having since left) dreams up draconic and very annoying measures just to get back at the 'those damn users'.

I wish id thought of that when I left permiehood.

[Mich the Tester]

No-one ever heard of SSO (single sign-on?) If I forget any I just ring up the security guy and he resets it for me. the only problem is that it is so difficult trying to think of a new password as the various systems remember your last few and you get messages saying that it is too similar to the old ones. For logging on to my desktop I have a smartcard and I'll not forget that one, then on my desktop I use a virtual Post-It note with all systems and passwords.

Yes! They had a SSO at my last clientco; it was not exactly brilliant because the password resest had to be requested from America and then carried out by Mr Bob Shawadiwadi in Bangalore who only reset the password for a single application at a time 'yes, this is being in accordance with single sign on policy conforming'.

[Sockpuppet]

KeePass

[Mich the Tester]

KeePass

I've never lost my ass.

[Sysman]

Yep our ones do that as well and best of all they work on both Windows and Linux (my desktop is Ubuntu and was previously Redhat.) Also the smartcards are also used to pay in the canteen or shop or machines, you just load it up as you go and they work on the security system letting you into the building and rooms depending on the access level and are also used for clocking in! They do everything except wipe your bum in the toilet.

That sounds neat. What do you do if you get to work and realise you have left your card at home?

[Sysman]

I've never lost my ass.

KeePass Password Safe

KeePass is a free open source password manager, which helps you to manage your passwords in a secure way. You can put all your passwords in one database, which is locked with one master key or a key file. So you only have to remember one single master password or select the key file to unlock the whole database. The databases are encrypted using the best and most secure encryption algorithms currently known (AES and Twofish).

Waits for someone to point out a security hole in KeePass...

[darmstadt]

That sounds neat. What do you do if you get to work and realise you have left your card at home?

Apparently they have special cards you can borrow, I'm not too sure how they work but I know they let you log on to the systems but they're restricted in some ways.

[Sysman]

Apparently they have special cards you can borrow, I'm not too sure how they work but I know they let you log on to the systems but they're restricted in some ways.

I used to lock mine in my desk overnight, but of course it didn't double up as a pass to let you into the building. Apparently you could still get to the desktop and other apps as long as you remembered their passwords, which would probably hinder you.