# Password burnout **URL:** \ **Category:** Miscellaneous and Personal Stuff I Must Share\ **Created:** [January 21, 2004, 2:08pm UTC](https://boards.straightdope.com/t/password-burnout/225457 "2004-01-21T14:08:25Z")\ **Posts on this page:** 20\ **Page:** 2
**Author:** ![Q.N.Jones](https://avatars.discourse-cdn.com/v4/letter/q/3da27b/32.png) [@Q.N.Jones](https://boards.straightdope.com/u/Q.N.Jones)\ **Post date:** [January 22, 2004, 5:16am UTC](https://boards.straightdope.com/t/password-burnout/225457/21 "2004-01-22T05:16:45Z")
I have one that I use for everything. I keep it totally secret, and it’s completely unguessable. Except for the system log-in at work. I have to change it every 30 days. I can’t re-use passwords on that one, so I’m constantly making up new stupid passwords. I have a theme and pick a new word that fits that theme every month. Made up example: science fiction. So, one month, it might be “picard,” the next month “starwars,” the next month “shatner,” whatever. So far, it’s working well. There are pretty much limitless possibilities with my theme. ---
**Author:** ![rjk](https://avatars.discourse-cdn.com/v4/letter/r/ed655f/32.png) [@rjk](https://boards.straightdope.com/u/rjk)\ **Post date:** [January 22, 2004, 6:54am UTC](https://boards.straightdope.com/t/password-burnout/225457/22 "2004-01-22T06:54:02Z")
Let me count: Two for Web stuff Bank card Work network login Work Lotus Notes Work job-tracking software Work vmail Work Website access Work pay-stub info That’s 9 I control. Then there are more at work I use all the time but don’t control: Helpdesk vmail Helpdesk system status message on vmail Helpdesk reset script, and the special section within it Student Novell password database Remote-control program to take over a user’s screen Generic-user account for staff who don’t have Novell accounts yet That’s 7 more, unless I missed something, so 16 that are more or less fresh. Finally, there are four or five more I don’t use often and usually need to look up. We have users who can’t cope with the three or four basic ones, so they want to set them all the same. Unfotunately, a couple are numeric, and one requires a mix of letters and other characters, but at least they can get down to two. ---
**Author:** ![Rhubarb](https://avatars.discourse-cdn.com/v4/letter/r/59ef9b/32.png) [@Rhubarb](https://boards.straightdope.com/u/Rhubarb)\ **Post date:** [January 22, 2004, 7:32am UTC](https://boards.straightdope.com/t/password-burnout/225457/23 "2004-01-22T07:32:19Z")
I have hit upon a method for dealing with forced password changes at work that seems to work pretty well. I have to change my network login every 3 months, so I have a short (2-5 characters) nonsense word followed by the month/year that I have to change it next. For example, if I changed passwords today, my new pw would be snzx0404 and the old one was snzx0104. The password never repeats, and I never have to memorize a new one. For not so critical passwords, that don’t change, I just use the nonsense word alone. It seems to work for me. ---
**Author:** ![Fugazi](https://avatars.discourse-cdn.com/v4/letter/f/f08c70/32.png) [@Fugazi](https://boards.straightdope.com/u/Fugazi)\ **Post date:** [January 22, 2004, 8:33am UTC](https://boards.straightdope.com/t/password-burnout/225457/24 "2004-01-22T08:33:07Z")
Yes! I reached password burnout a long time ago. It’s getting so I can’t remember my phone number. 😉 I was just trying to list out all the crap I need for work & I hadn’t realized how bad it has gotten. Windows login…in windows I have: Iris login – ticketing system Titan login Yahoo messenger login Wavestar Gui login – Lucent software SNMS login – more Lucent crap Artis login – A records database Xpercom – Another records database Unix login…in Unix I have: Fujitsu login Netcool login – A network monitoring system SNC 2000 – Yet more Lucent crap React login – A remote T1 testing system Nortel login Plus my phone and 4 more logins when I’m forced to run security too. That’s just for work, I got more at home. If I didn’t use variations on a few basic non-guessable words, I’d be doomed. ---
**Author:** ![Small\_Clanger](https://avatars.discourse-cdn.com/v4/letter/s/9fc348/32.png) [@Small\_Clanger](https://boards.straightdope.com/u/Small_Clanger)\ **Post date:** [January 22, 2004, 12:57pm UTC](https://boards.straightdope.com/t/password-burnout/225457/25 "2004-01-22T12:57:53Z")
**eve - VenusProbe - Q.N. Jones** thanks. You have confirmed my theory that if you force people to keep changing passwords they degenerate to generic crap and will probably be written on post-its stuck under the keyboard. It happened here with the phone system. BTW **Q.N.** all the SciFi stuff is bound to be in any cracking dictionary, but you knew that. ---
**Author:** ![OpalCat](https://avatars.discourse-cdn.com/v4/letter/o/8edcca/32.png) [@OpalCat](https://boards.straightdope.com/u/OpalCat)\ **Post date:** [January 22, 2004, 1:13pm UTC](https://boards.straightdope.com/t/password-burnout/225457/26 "2004-01-22T13:13:58Z")
Pick a word you will remember. Let’s say PIRATE Now let’s say the site you are at is [amazon.com](http://amazon.com) Interweave the letters of the site into your word until you run out of room. This is now your password: PaImRaAzToE Or just use RoboForm [http://roboform.com/](http://roboform.com/) ---
**Author:** ![JRDelirious](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/jrdelirious/32/9531_2.png) [@JRDelirious](https://boards.straightdope.com/u/JRDelirious)\ **Post date:** [January 22, 2004, 2:13pm UTC](https://boards.straightdope.com/t/password-burnout/225457/27 "2004-01-22T14:13:48Z")
The ones that really give me trouble are when I put my login in an autoscript, and after a while I no longer have a clue of what was the password since I never get to use it. That’s a pain. So are the change-every-month, non-reusable pwds – often implemented in places where it’s total overkill. Generaly speaking, I try to associate login names with password patterns – e.g. if my UserID includes a particular root word or initials, the password uses a permutation of a fixed set of other root “words” (alphanumeric sequences, really) that are meaningful TO ME. If the site does not give me the choice of my own name and pwd I seriously reconsider if I really need to work/shop there. Having bought a Palm Tungsten|E recently (yay for fun practical toys), I am copying everything onto a “private” memo file with its own relatively-easy-for-me-and-my-trusted-associates password. However I’d rather avoid becoming too dependent on it. ---
**Author:** ![mailman](https://avatars.discourse-cdn.com/v4/letter/m/8491ac/32.png) [@mailman](https://boards.straightdope.com/u/mailman)\ **Post date:** [January 22, 2004, 5:07pm UTC](https://boards.straightdope.com/t/password-burnout/225457/28 "2004-01-22T17:07:27Z")
Oddly enough, over dinner last night my wife complained of password burnout–hours after I had replied to this thread. She isn’t too thrilled with computers to begin with–she’s an artist–and couldn’t remember a password for some airline site she had joined months ago. Since she couldn’t remember the damn thing, I think she booked on another airline–take that password nazis! ---
**Author:** ![gotpasswords](https://avatars.discourse-cdn.com/v4/letter/g/c57346/32.png) [@gotpasswords](https://boards.straightdope.com/u/gotpasswords)\ **Post date:** [January 23, 2004, 1:29am UTC](https://boards.straightdope.com/t/password-burnout/225457/29 "2004-01-23T01:29:51Z")
How ironic. I click “reply” and the hamsters decide to forget who I am and make me enter my name and password. :smack: And now for the other side of the topic… I’ve got too many passwords! wah wah wah! I have to change my passwords! boo hoo hoo! How do you think it feels to be someone who administers passwords? At work, I stopped counting after 50 passwords. Fifty passwords?? Ugh. Yep. I do on-call support, so if someone pages at an inconvenient time (There seems to be a shift change at 3AM) because they goofed their Unix password, I normally have to go through: \*\*\*\*\* Cell phone key unlock code to call the luser \*\*\*\*\* Laptop power-on password \*\*\*\*\* Windows / LAN password \*\*\*\*\* Remote access transport password \*\*\*\*\* Remote access login password \*\*\*\*\* Remote access PIN for token (device changes a 6-digit number every 60 seconds) \*\*\*\*\* Unix virtual workstation password (turns my laptop into an X Terminal) \*\*\*\*\* PIN for Unix access token \*\*\*\*\* PIN for Unix token administration system \*\*\*\*\* And on occasion, one of 14 Unix “hostgroup” root passwords. (logical groupings of our 400 or so servers) How do I keep track of it all? A variety of encrypted databases, obscured lists and memory. ---
**Author:** ![j\_sum1](https://avatars.discourse-cdn.com/v4/letter/j/8baadc/32.png) [@j\_sum1](https://boards.straightdope.com/u/j_sum1)\ **Post date:** [January 23, 2004, 5:40am UTC](https://boards.straightdope.com/t/password-burnout/225457/30 "2004-01-23T05:40:07Z")
I have about half a dozen I suppose of different security levels. Plus I don’t know how many four digit PINs of various kinds. And then variations on these for those situations where passwords are required to be changed regularly. For those I keep the same basic “word” but shift one or both of my hands on the keyboard. I have three or four positions that I cycle. Keeps the nonsense look, introduces non alphabetic characters and works like a charm. ---
**Author:** ![Stage\_Manager](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/stage_manager/32/7267_2.png) [@Stage\_Manager](https://boards.straightdope.com/u/Stage_Manager)\ **Post date:** [January 23, 2004, 7:24am UTC](https://boards.straightdope.com/t/password-burnout/225457/31 "2004-01-23T07:24:10Z")
I have one password and one PIN that I’ve used for going on twenty years now. In some cases I have to append ‘99’ at the end for those sites that require letters _and_ numbers. I’ve not had my identity stolen (that I am aware of). ---
**Author:** ![sleestak](https://avatars.discourse-cdn.com/v4/letter/s/919ad9/32.png) [@sleestak](https://boards.straightdope.com/u/sleestak)\ **Post date:** [January 23, 2004, 8:47am UTC](https://boards.straightdope.com/t/password-burnout/225457/32 "2004-01-23T08:47:50Z")
I am down to 10 passwords and I am damned happy about it. When I worked at AOL in the NOC I had about 30 passwords to remember. That wouldn’t be too bad except this. Each password had to be changed weekly. Each password, when changed, had to be unique. In other words you couldn’t just change a number on the end or something similar. So I had to keep track of 30 some odd passwords that changed weekly. Then to make things a little more fun they added SecureID. SecureID is a little key chain thingy that you carry around with you. The SecureID keychain has a window that displays a 10(I think it is 10, it might be 12) digit number that changes every few minutes. IIRC, the number changed based upon a signal sent from a satalite. Anyway, once you logged in with your password you had to type in the number on the SecureID fob. Once that was done you could actually login. We tried to track the SecureID numbers to see if we could hack it but we never got anywhere, mainly due to a lack of time. The SecureID numbers change pretty quickly, like every 3 minutes or so IIRC. I miss working at AOL but I _DO NOT_ miss living in password hell. ---
**Author:** ![BobLibDem](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/boblibdem/32/3149_2.png) [@BobLibDem](https://boards.straightdope.com/u/BobLibDem)\ **Post date:** [January 23, 2004, 6:32pm UTC](https://boards.straightdope.com/t/password-burnout/225457/33 "2004-01-23T18:32:51Z")
I like Opal’s system, I’ll have to try it. I tend to rotate among 3 or 4 favorites for all sites and applications. I was a bit embarrassed when at work I had to tell my IT support person what my password was. At the time it was “dog poop” ---
**Author:** ![Kingspades](https://avatars.discourse-cdn.com/v4/letter/k/ecae2f/32.png) [@Kingspades](https://boards.straightdope.com/u/Kingspades)\ **Post date:** [January 23, 2004, 6:59pm UTC](https://boards.straightdope.com/t/password-burnout/225457/34 "2004-01-23T18:59:06Z")
For important things, I have three meaningless alphanumeric codes that I use as passwords. For less important things, especially website user accounts, I have a standard password that I append the website’s URL to the end of. For example, XXXXyahoo, XXXXsdmb, etc. ---
**Author:** ![OpalCat](https://avatars.discourse-cdn.com/v4/letter/o/8edcca/32.png) [@OpalCat](https://boards.straightdope.com/u/OpalCat)\ **Post date:** [January 23, 2004, 7:20pm UTC](https://boards.straightdope.com/t/password-burnout/225457/35 "2004-01-23T19:20:59Z")
> [@sleestak](#): > > Then to make things a little more fun they added SecureID. SecureID is a little key chain thingy that you carry around with you. The SecureID keychain has a window that displays a 10(I think it is 10, it might be 12) digit number that changes every few minutes. Oh god I remember when they started using those! My husband was working for them (Digital Cities actually, at that time) and that thing was such a pain in the ass! ---
**Author:** ![NE\_Texan](https://avatars.discourse-cdn.com/v4/letter/n/e99b99/32.png) [@NE\_Texan](https://boards.straightdope.com/u/NE_Texan)\ **Post date:** [January 23, 2004, 7:25pm UTC](https://boards.straightdope.com/t/password-burnout/225457/36 "2004-01-23T19:25:06Z")
> [@Munch](#): > > Looking online, looks like that $30 may have been a brain fart. They’re quite a bit more, anywhere from $70-$200. He works in the industry, and probably got a deal. **Munch** , I think you were right with your initial estimate of flash drive cost. My MIL has a tax prep business, and she was talking about the nuisance of transferring files from home to work and back (she has an office, but works at home as well). I suggested a flash drive, and helped her find one when we were there over the holidays. At Office Max, they had a 64MB flash drive for $30, which had a special of the week rebate for $20, making it $10. At that price, she decided she might as well try it. Now if you want 256M or 512M flash drives, then the price goes up pretty fast. But for passwords? Sure, get whatever size is under $10. Back to the topic: I’ve got one basic password for non-secure sites – like message boards. I have a different one for slightly more secure places – like my e-mail account. Each of my financial accounts that I can get to online (like, to pay the electric bill) has a slightly different password on a similar theme. At work, they make us change the password periodically. I have four passwords that I cycle through. Each started as a nonsense word that my son used when he was learning to talk (over a decade ago), that incorporates a number (whether it’s “1” for “L”, or has “one” in it, or whatever) – and I cycle through them in numerical order. So they’re all mixed case, mixed numerals and letters; none is a dictionary word; but they’re easy to remember, and if I was forced to change recently and remember the previous one instead, I know what the current one is. I had a similar set at my previous employer, but I don’t reuse the same ones. ---
**Author:** ![NutWrench](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/nutwrench/32/20193_2.png) [@NutWrench](https://boards.straightdope.com/u/NutWrench)\ **Post date:** [January 23, 2004, 7:44pm UTC](https://boards.straightdope.com/t/password-burnout/225457/37 "2004-01-23T19:44:17Z")
I use this freeware program to manage all my passwords. Now, I only have to remember ONE password. 🙂 [http://www.tranglos.com/free/oubliette.html](http://www.tranglos.com/free/oubliette.html) ---
**Author:** ![gotpasswords](https://avatars.discourse-cdn.com/v4/letter/g/c57346/32.png) [@gotpasswords](https://boards.straightdope.com/u/gotpasswords)\ **Post date:** [January 24, 2004, 12:59am UTC](https://boards.straightdope.com/t/password-burnout/225457/38 "2004-01-24T00:59:01Z")
> [@OpalCat](#): > > Oh god I remember when they started using those! My husband was working for them (Digital Cities actually, at that time) and that thing was such a pain in the ass! Hrmph… I’ve got _two_ of the infernal things, and they’re not interchangeable. Two-factor authentication is well and good (it takes something you know and something you physically have to come up with the “password”) but the dang things are fragile! I’ve lost count of how many of my users have killed their tokens by leaving them in hot cars, putting them through the laundry or dropping them. btw - they don’t work by satellite. They simply have an accurate internal clock and a unique “seed” value that’s used to generate pseudo-random numbers. The token authentication server has the same seed values, and it’s very important that the server has accurate time so its expectations of what number’s on a token matches what’s actually on the token. The server is adaptive - it’ll accept the value before and after the current number it’s expecting and token by token, keeps track of the variances so it can compensate for clock drift in the tokens. Works pretty well - in three years, I’ve only had to re-sync one token. ---
**Author:** ![french\_frog](https://avatars.discourse-cdn.com/v4/letter/f/c77e96/32.png) [@french\_frog](https://boards.straightdope.com/u/french_frog)\ **Post date:** [January 25, 2004, 12:33am UTC](https://boards.straightdope.com/t/password-burnout/225457/39 "2004-01-25T00:33:45Z")
I use 1 pwd for all non-lethal sites such as SDMB. The other ones I made them up with a sentence that I know i’ll remember. Usually they ask for 8 characters so it’s gonna be: (examples not real pwd 🙂 ) IamChris – me Mydogis7 – my dog 81redvet – my car ---
**Author:** ![Q.N.Jones](https://avatars.discourse-cdn.com/v4/letter/q/3da27b/32.png) [@Q.N.Jones](https://boards.straightdope.com/u/Q.N.Jones)\ **Post date:** [January 25, 2004, 1:08am UTC](https://boards.straightdope.com/t/password-burnout/225457/40 "2004-01-25T01:08:10Z")
> [@Small Clanger](#): > > **eve - VenusProbe - Q.N. Jones** thanks. > > You have confirmed my theory that if you force people to keep changing passwords they degenerate to generic crap and will probably be written on post-its stuck under the keyboard. It happened here with the phone system. > > BTW **Q.N.** all the SciFi stuff is bound to be in any cracking dictionary, but you knew that. Sure, if someone knew what my theme was, they could figure out my passwords pretty easily. It’s not SciFi. And even if someone cracked my passwords, I don’t care, really. There are no state secrets in my work e-mail. Just a lot of boring crap. [Previous page](https://boards.straightdope.com/t/password-burnout/225457.md?page=1) [Next page](https://boards.straightdope.com/t/password-burnout/225457.md?page=3)