You must use at least one uppercase letter,george bataille eroticism and death breakdown a symbol, and a number. Or, wait, maybe not.
According to the experts at the National Institute of Standards and Technology (NIST), some of the password-strength requirements drilled into our skulls over the years are actually not that helpful.
What's worse, they may be counterproductive.
SEE ALSO: New tool teaches you how to set stronger passwordsAs such, the institute issued a new draft of security guidelines on May 11, 2017, aimed at security professionals and recommending several significant changes to the password requirements we've come to accept as a necessary part of life.
What's different? Well, for one, the experts say that forcing users to create passwords which include numbers and random characters is no longer necessary.
"[Online] services have introduced rules in an effort to increase the complexity of [passwords]," reads the draft appendix. "The most notable form of these is composition rules, which require the user to choose passwords constructed using a mix of character types, such as at least one digit, uppercase letter, and symbol. However, analyses of breached password databases reveals that the benefit of such rules is not nearly as significant as initially thought, although the impact on usability and memorability is severe."
Basically, passwords full of #'s and &'s are hard to remember, and they don't actually offer that much of a benefit. Instead, NIST recommends that people be allowed to choose any password of 8 characters or more — with a catch.
The catch being that whatever the user selects should be compared against a list of known common passwords. Lists of stolen passwords exist, and if the key to your email account is something like "monkey" then NIST says it should be rejected.
Who is doing the work of comparing your desired password against the aforementioned list? Don't worry, it's not you. Instead, that responsibility would theoretically fall to whatever service you're trying to create an account with.
What else does NIST throw out the digital window? Why that would be a little annoying thing called forced password resets. That's right, it turns out obligating users to change their passwords — regardless of any data breaches or lack thereof — is counterproductive. Of course, if a company discovers it's been hacked, you should still be required to reset your login information.
The experts at NIST also go after what is a huge pet peeve of mine: security questions. Preset security questions that a user is forced to fill out, like "what high school did you attend," are easily discovered by hackers via a simple Google search (as Sarah Palin once painfully discovered) and should be done away with entirely.
"Verifiers also SHALL NOT prompt subscribers to use specific types of information (e.g., 'What was the name of your first pet?') when choosing memorized secrets," the draft declaratively states. Nice.
So, to recap: No special characters required, no forced password resets, and no fixed (easily guessable) security questions. It's almost like all the password security advice we've been given is wrong.
Except that chestnut about using two-factor authentication. You should still definitely do that.
Topics Cybersecurity
Mark Zuckerberg is taking two months off to spend time with his second daughterThis dating app will let you video chat with matches before you waste your time IRLThe solar eclipse shows up beautifully in weather forecast modelsSteven Soderbergh's new HBO show will have a chooseYou'll want to swipe right on our Tinder profiles for 'Game of Thrones' charactersI'll never care about your overhyped eclipseHow to put old photos in your social media storiesVisit Chernobyl in virtual reality on PlayStation VRThe definitive ranking of 'Game of Thrones' characters most likely to die in episode 6The definitive ranking of 'Game of Thrones' characters most likely to die in episode 6'Game of Thrones': Jaime Lannister won't appear in Sunday's episodeThe Essential Phone's gorgeous screen embarrasses all other phonesMove over, activated charcoal. Try the matte black latte.Custom Nintendo Switch stand turns the console into a mini arcade cabinetEmilia Clarke just shared her greatest 'Game of Thrones' Instagram post so farAn app paid me $10 to wait in line and then party at Samsung's NYC spaceThe Essential Phone's gorgeous screen embarrasses all other phonesCanada's forests are on fire, and the smoke is seeping into the ArcticPro tips: How to get the best photos of the solar eclipse with a phone or a cameraArnold Schwarzenegger just told a Trump bobblehead doll what to say about Charlottesville For one beautiful night, #fartgate actually united all of Twitter This is the most annoying bong ever made 'The Last of Us' episode 4: Who is Kathleen? The 'Squid Game' reality show is a dangerous disaster How to watch the 2023 Grammy Awards Fox News attacks George Kent for... drinking water at the impeachment hearing 8 classic 'stand How are we regulating ChatGPT and other AI tools? Samsung Galaxy S23 phone cases: 10 unique options for Samsung's new phones Wordle today: Here's the answer, hints for February 3 Wordle today: Here's the answer, hints for February 2 Wordle today: Here's the answer, hints for February 5 Every single 'Harry Potter' spell, ranked by usefulness Beyoncé now holds the record for most Grammy wins at 32 awards Are the Samsung Galaxy S23 colors really lavender and green? How does Tinder develop the features that keep you safe? WhatsApp is letting users post voice notes as statuses 6 nightmare Trump's White House lawn rant sounds better as a pop punk ballad An especially cold text reply about setting boundaries is a copypasta now
3.3974s , 10195.8828125 kb
Copyright © 2025 Powered by 【george bataille eroticism and death breakdown】,Steady Information Network