# Guy who came up with all those crazy password rules now says he's sorry **URL:** \ **Category:** Miscellaneous and Personal Stuff I Must Share\ **Created:** [August 9, 2017, 1:01pm UTC](https://boards.straightdope.com/t/guy-who-came-up-with-all-those-crazy-password-rules-now-says-hes-sorry/793171 "2017-08-09T13:01:55Z")\ **Posts on this page:** 20\ **Page:** 2
**Author:** ![running\_coach](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/running_coach/32/15836_2.png) [@running\_coach](https://boards.straightdope.com/u/running_coach)\ **Post date:** [August 9, 2017, 5:01pm UTC](https://boards.straightdope.com/t/guy-who-came-up-with-all-those-crazy-password-rules-now-says-hes-sorry/793171/21 "2017-08-09T17:01:54Z")
> [@CairoCarol](#): > > Tape it to the side of your monitor. I keep them hidden under the keyboard. ---
**Author:** ![Sunny\_Daze](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/sunny_daze/32/438_2.png) [@Sunny\_Daze](https://boards.straightdope.com/u/Sunny_Daze)\ **Post date:** [August 9, 2017, 5:04pm UTC](https://boards.straightdope.com/t/guy-who-came-up-with-all-those-crazy-password-rules-now-says-hes-sorry/793171/22 "2017-08-09T17:04:47Z")
Under the keyboard works too. 😉 ETA: Ninja’ed! ---
**Author:** ![CarnalK](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/carnalk/32/486_2.png) [@CarnalK](https://boards.straightdope.com/u/CarnalK)\ **Post date:** [August 9, 2017, 5:52pm UTC](https://boards.straightdope.com/t/guy-who-came-up-with-all-those-crazy-password-rules-now-says-hes-sorry/793171/23 "2017-08-09T17:52:30Z")
> [@Khendrask](#): > > Not only do the password rules suck, but I have incredible hate for the “Security Questions”, unless they at least let you make up your own. > > I have too many with things like “Your High School”, or “Your Pet’s Name”. Okay, stupid to complain about, but for school, did I put the initials? “AB Charlie HS”? Did I spell it out? “Alpha Bravo Charlie” ? Did I just use the “Charlie”? > > For pets, My current pet? The pet I had when I made the account? When was that? > > I generally ignore all of them now, and just have the bank or whatever text me a security code, but a lot still won’t do that. I just quit using real answers and stuck with basically a backup password. Favorite color? Mona Lisa. My mother’s maiden name? Mona Lisa. ---
**Author:** ![Spiderman](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/spiderman/32/230_2.png) [@Spiderman](https://boards.straightdope.com/u/Spiderman)\ **Post date:** [August 9, 2017, 5:55pm UTC](https://boards.straightdope.com/t/guy-who-came-up-with-all-those-crazy-password-rules-now-says-hes-sorry/793171/24 "2017-08-09T17:55:53Z")
> [@running\_coach](#): > > I keep them hidden under the keyboard. > [@Sunny\_Daze](#): > > Under the keyboard works too. 😉 Really? Seriously? That’s not secure at all. Under the keyboard it’s supposed to say, “Remember, this isn’t a safe place for a password. Look it top desk drawer.” ---
**Author:** ![JcWoman](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/jcwoman/32/2889_2.png) [@JcWoman](https://boards.straightdope.com/u/JcWoman)\ **Post date:** [August 9, 2017, 6:08pm UTC](https://boards.straightdope.com/t/guy-who-came-up-with-all-those-crazy-password-rules-now-says-hes-sorry/793171/25 "2017-08-09T18:08:25Z")
> [@CarnalK](#): > > I just quit using real answers and stuck with basically a backup password. Favorite color? Mona Lisa. My mother’s maiden name? Mona Lisa. I’ve tried that. There are actually asshole systems out there that check for it and give you an error if you have the same answer for all the questions. :mad: ---
**Author:** ![Guinastasia](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/guinastasia/32/5751_2.png) [@Guinastasia](https://boards.straightdope.com/u/Guinastasia)\ **Post date:** [August 9, 2017, 6:13pm UTC](https://boards.straightdope.com/t/guy-who-came-up-with-all-those-crazy-password-rules-now-says-hes-sorry/793171/26 "2017-08-09T18:13:36Z")
Hey, you know if you type in your SD password here it shows up as astericks? Check it out: \*\*\*\*\*\*\*\*\*\* ---
**Author:** ![running\_coach](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/running_coach/32/15836_2.png) [@running\_coach](https://boards.straightdope.com/u/running_coach)\ **Post date:** [August 9, 2017, 6:29pm UTC](https://boards.straightdope.com/t/guy-who-came-up-with-all-those-crazy-password-rules-now-says-hes-sorry/793171/27 "2017-08-09T18:29:57Z")
> [@Guinastasia](#): > > Hey, you know if you type in your SD password here it shows up as astericks? Check it out: \*\*\*\*\*\*\*\*\*\* That’s why my password is all asterisks. ---
**Author:** ![CarnalK](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/carnalk/32/486_2.png) [@CarnalK](https://boards.straightdope.com/u/CarnalK)\ **Post date:** [August 9, 2017, 6:42pm UTC](https://boards.straightdope.com/t/guy-who-came-up-with-all-those-crazy-password-rules-now-says-hes-sorry/793171/28 "2017-08-09T18:42:23Z")
> [@JcWoman](#): > > I’ve tried that. There are actually asshole systems out there that check for it and give you an error if you have the same answer for all the questions. :mad: I haven’t encountered that but my workaround would be: Favorite color? “Mona Lisa color”. Mother’s maiden name? “Mona Lisa maiden”. ---
**Author:** ![Gatopescado](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/gatopescado/32/5711_2.png) [@Gatopescado](https://boards.straightdope.com/u/Gatopescado)\ **Post date:** [August 9, 2017, 6:50pm UTC](https://boards.straightdope.com/t/guy-who-came-up-with-all-those-crazy-password-rules-now-says-hes-sorry/793171/29 "2017-08-09T18:50:11Z")
> [@Sir\_T-Cups](#): > > Anyone else see the name of the guy and immediately think of the comedian? Yep. I can see him giving a fist-bump during the “Racial Draft”. ---
**Author:** ![Sir\_T-Cups](https://avatars.discourse-cdn.com/v4/letter/s/ed655f/32.png) [@Sir\_T-Cups](https://boards.straightdope.com/u/Sir_T-Cups)\ **Post date:** [August 9, 2017, 7:08pm UTC](https://boards.straightdope.com/t/guy-who-came-up-with-all-those-crazy-password-rules-now-says-hes-sorry/793171/30 "2017-08-09T19:08:14Z")
> [@Guinastasia](#): > > Hey, you know if you type in your SD password here it shows up as astericks? Check it out: \*\*\*\*\*\*\*\*\*\* Really? That’s awesome! Let me try! IwannamakelovetoGuinastasia\<3 ---
**Author:** ![kanicbird](https://avatars.discourse-cdn.com/v4/letter/k/5f8ce5/32.png) [@kanicbird](https://boards.straightdope.com/u/kanicbird)\ **Post date:** [August 9, 2017, 7:15pm UTC](https://boards.straightdope.com/t/guy-who-came-up-with-all-those-crazy-password-rules-now-says-hes-sorry/793171/31 "2017-08-09T19:15:29Z")
It would be easier if they told me the damn rules that they required to make the password when I try to enter it. example: Knowing if they require a symbol or disallow symbols helps me remember what password I used with them. ---
**Author:** ![Spiderman](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/spiderman/32/230_2.png) [@Spiderman](https://boards.straightdope.com/u/Spiderman)\ **Post date:** [August 9, 2017, 7:22pm UTC](https://boards.straightdope.com/t/guy-who-came-up-with-all-those-crazy-password-rules-now-says-hes-sorry/793171/32 "2017-08-09T19:22:03Z")
I just went onto a new website & you had to choose three questions from the drop down list; they included: [ul] [li]What was the name of your first pet? _(First pet, the dog they had until I was 2 & don’t really remember, or the first dog I got when living on my own?)_[/li][li]City Mom born in [/li][li]City Dad born in _(I know where my parents lived when they were born, but what city depends upon which hospital, which I don’t know.)_[/li][li]First foreign country visited[/li][li]First & last name of childhood best friend[/li][li]First & Last name of first manager[/li][li]First & Last name of first girl/boyfriend[/li][li]First concert you attended[/li][li]What was the last name of your favorite teacher in your final year of school?[/li][li]What was your childhood nickname that most people do not know?[/li][/ul] The rest of the questions are from decades ago; I couldn’t tell you some of answers if lives depended on it. The following questions were also in the list but may not have a valid answer if you’re single, eloped, or are an only child. [ul] [li]First & last name of the maid/matron of honor at your wedding[/li][li]First & last name of the best man of honor at your wedding[/li][li]First & last name of oldest niece[/li][li]First & last name of oldest nephew[/li][/ul] ---
**Author:** ![Inner\_Stickler](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/inner_stickler/32/318_2.png) [@Inner\_Stickler](https://boards.straightdope.com/u/Inner_Stickler)\ **Post date:** [August 9, 2017, 7:25pm UTC](https://boards.straightdope.com/t/guy-who-came-up-with-all-those-crazy-password-rules-now-says-hes-sorry/793171/33 "2017-08-09T19:25:52Z")
They don’t run a dossier on you, you know. For the purposes of security questions, your first pet was named Johnny Goodboy, your dad was born in Smallville, you first visited Narnia with your best friend Anne of Green Gables, etc. Just be consistent with the answers you pick for questions. ---
**Author:** ![MoonMoon](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/moonmoon/32/2959_2.png) [@MoonMoon](https://boards.straightdope.com/u/MoonMoon)\ **Post date:** [August 9, 2017, 7:26pm UTC](https://boards.straightdope.com/t/guy-who-came-up-with-all-those-crazy-password-rules-now-says-hes-sorry/793171/34 "2017-08-09T19:26:36Z")
> [@kanicbird](#): > > It would be easier if they told me the damn rules that they required to make the password when I try to enter it. > > example: Knowing if they require a symbol or disallow symbols helps me remember what password I used with them. Yes! And tell me what the damn requirements are BEFORE I try to create one. ---
**Author:** ![Drunky\_Smurf](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/drunky_smurf/32/449_2.png) [@Drunky\_Smurf](https://boards.straightdope.com/u/Drunky_Smurf)\ **Post date:** [August 9, 2017, 7:31pm UTC](https://boards.straightdope.com/t/guy-who-came-up-with-all-those-crazy-password-rules-now-says-hes-sorry/793171/35 "2017-08-09T19:31:05Z")
I hope someone kicked him in the nads. ---
**Author:** ![Folacin](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/folacin/32/3195_2.png) [@Folacin](https://boards.straightdope.com/u/Folacin)\ **Post date:** [August 9, 2017, 7:31pm UTC](https://boards.straightdope.com/t/guy-who-came-up-with-all-those-crazy-password-rules-now-says-hes-sorry/793171/36 "2017-08-09T19:31:49Z")
Our most restrictive password policy is for our SVN code respository: > [@](#): > > Complexity Rules: > •MUST be between 8 - 20 characters long > •MUST contain at least 1 letter AND 1 number > •MUST differ from the Account Name by at least 3 positions > •MUST NOT contain repeated OR sequential characters > •MUST NOT contain a sequence of three or more characters from the previous password > •MUST NOT contain any spaces > •MUST NOT contain the following special characters: . ` @ \* ( - { ] , \> ? > Aging Rules: •Your password MUST be changed at least every 90 days > •You CANNOT reuse your last 4 passwords > •You CANNOT reuse any password that has been used within the past 4 months It’s such that I have a hard time thinking up a password that I can remember. Fortunately, the password is store in clear text in my home directory structure (and the system remembers it so I only have to remember it long enough to get signed in the first time). The repeated characters one is particularly troublesome - for instance “allMyChildren1” would not pass. ---
**Author:** ![UncleRojelio](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/unclerojelio/32/3160_2.png) [@UncleRojelio](https://boards.straightdope.com/u/UncleRojelio)\ **Post date:** [August 9, 2017, 7:45pm UTC](https://boards.straightdope.com/t/guy-who-came-up-with-all-those-crazy-password-rules-now-says-hes-sorry/793171/37 "2017-08-09T19:45:13Z")
From back in the BBS days I have several 8 character random alphanumeric passwords memorized. Nowadays, to generate a password for work I just string two of them together with a ‘special character’ or two in between. Then I can write myself a hint by just writing the first character of the two strings and the special character. For the ones I have to change every 30 days I just change the special character. I only do this for work passwords because there are spaces where I work that I can’t bring my phone into. Otherwise, I keep the other 8 gazzilion internet passwords in 1Password on my phone/computer and they are whatever 1Password generated. ---
**Author:** ![Slash1972](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/slash1972/32/6461_2.png) [@Slash1972](https://boards.straightdope.com/u/Slash1972)\ **Post date:** [August 9, 2017, 7:47pm UTC](https://boards.straightdope.com/t/guy-who-came-up-with-all-those-crazy-password-rules-now-says-hes-sorry/793171/38 "2017-08-09T19:47:13Z")
> [@Folacin](#): > > Fortunately, the password is store in clear text in my home directory structure This seems strange. Can you elaborate? ---
**Author:** ![UncleRojelio](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/unclerojelio/32/3160_2.png) [@UncleRojelio](https://boards.straightdope.com/u/UncleRojelio)\ **Post date:** [August 9, 2017, 7:51pm UTC](https://boards.straightdope.com/t/guy-who-came-up-with-all-those-crazy-password-rules-now-says-hes-sorry/793171/39 "2017-08-09T19:51:11Z")
> [@Slash1972](#): > > This seems strange. Can you elaborate? Yeah, I was fixing to say. Seems like a huge security risk. ---
**Author:** ![Jack\_Batty](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/jack_batty/32/3201_2.png) [@Jack\_Batty](https://boards.straightdope.com/u/Jack_Batty)\ **Post date:** [August 9, 2017, 7:52pm UTC](https://boards.straightdope.com/t/guy-who-came-up-with-all-those-crazy-password-rules-now-says-hes-sorry/793171/40 "2017-08-09T19:52:56Z")
> [@Sir\_T-Cups](#): > > Anyone else see the name of the guy and immediately think of the comedian? Absolutely. Especially because he has a running thing about not being able to remember his passwords. I had to read the article three times to make sure I wasn’t reading some comedy thing he threw up on a satire site or something. [Previous page](https://boards.straightdope.com/t/guy-who-came-up-with-all-those-crazy-password-rules-now-says-hes-sorry/793171.md?page=1) [Next page](https://boards.straightdope.com/t/guy-who-came-up-with-all-those-crazy-password-rules-now-says-hes-sorry/793171.md?page=3)