# Password nonsense

**URL:** https://boards.straightdope.com/t/password-nonsense/562464
**Category:** In My Humble Opinion
**Created:** [November 30, 2010, 9:26pm UTC](https://boards.straightdope.com/t/password-nonsense/562464 "2010-11-30T21:26:08Z")
**Posts on this page:** 20
**Page:** 1

<div class="post-metadata">

### Author: ![Icarus](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/icarus/32/72_2.png) [@Icarus](https://boards.straightdope.com/u/Icarus)
#### Post date: [November 30, 2010, 9:26pm UTC](https://boards.straightdope.com/t/password-nonsense/562464/1 "2010-11-30T21:26:08Z")

</div>

So, my employer has just published their new standards for network & system passwords:

[ul]  
[li]Minimum 15 characters[/li][li]2 numbers[/li][li]2 special characters (!, @, #, $, %, &, \*, +, etc.)[/li][li]2 lowercase letters[/li][li]2 uppercase letters[/li][/ul]  
Password will be changed every 60 days.

While I personally feel that these security folks are just a tad over-zealous, I think that they are missing opportunities for additional elements.

So, here are my suggestions to make the passwords even more secure. The password should also contain:

[ul]  
[li]A high pitched squeel[/li][li]A shade of aquamarine[/li][li]A yoga position[/li][li]A flavor of gravy[/li][li]Hair[/li][/ul]  
Feel free to add your own suggestion…

---

<div class="post-metadata">

### Author: ![Skammer](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/skammer/32/143_2.png) [@Skammer](https://boards.straightdope.com/u/Skammer)
#### Post date: [November 30, 2010, 9:31pm UTC](https://boards.straightdope.com/t/password-nonsense/562464/2 "2010-11-30T21:31:20Z")

</div>

No DNA sample? And they call that secure?

---

<div class="post-metadata">

### Author: ![Scuba\_Ben](https://avatars.discourse-cdn.com/v4/letter/s/278dde/32.png) [@Scuba\_Ben](https://boards.straightdope.com/u/Scuba_Ben)
#### Post date: [November 30, 2010, 9:32pm UTC](https://boards.straightdope.com/t/password-nonsense/562464/3 "2010-11-30T21:32:24Z")

</div>

Obviously the passwords may not be written down anywhere; passwords may not closely resemble the previous several; and users must log off at the end of their shift.

Now for the “more secure” fun:

- Non-ASCII characters.
- Two-factor authentication with a continuous blood sample. (Keep your finger on the needle, or the system kicks you off.)
- Must switch desks / workstations every few hours.
- No cell phones on company properly. Not even kept in your car.

---

<div class="post-metadata">

### Author: ![Canadjun](https://avatars.discourse-cdn.com/v4/letter/c/76d3ee/32.png) [@Canadjun](https://boards.straightdope.com/u/Canadjun)
#### Post date: [November 30, 2010, 9:34pm UTC](https://boards.straightdope.com/t/password-nonsense/562464/4 "2010-11-30T21:34:00Z")

</div>

The numbers have to be transcendental and imaginary.

---

<div class="post-metadata">

### Author: ![Icarus](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/icarus/32/72_2.png) [@Icarus](https://boards.straightdope.com/u/Icarus)
#### Post date: [November 30, 2010, 9:34pm UTC](https://boards.straightdope.com/t/password-nonsense/562464/5 "2010-11-30T21:34:07Z")

</div>

> [@Scuba\_Ben](#):
>
> - No cell phones on company properly. Not even kept in your car.

That was my last client - for real.

---

<div class="post-metadata">

### Author: ![tdn](https://avatars.discourse-cdn.com/v4/letter/t/94ad74/32.png) [@tdn](https://boards.straightdope.com/u/tdn)
#### Post date: [November 30, 2010, 9:35pm UTC](https://boards.straightdope.com/t/password-nonsense/562464/6 "2010-11-30T21:35:57Z")

</div>

All passwords must be in Klingonese.

---

<div class="post-metadata">

### Author: ![FairyChatMom](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/fairychatmom/32/21825_2.png) [@FairyChatMom](https://boards.straightdope.com/u/FairyChatMom)
#### Post date: [November 30, 2010, 9:42pm UTC](https://boards.straightdope.com/t/password-nonsense/562464/7 "2010-11-30T21:42:24Z")

</div>

I’ve dealt with the same requirements, with the addition of NO DOUBLES! So you can’t have BB or bb, but you can have Bb or bB. Fine. Whatever.

I’ve seen some where they won’t permit any sequential characters or numbers either. And, of course, no dictionary words within…

---

<div class="post-metadata">

### Author: ![tr0psn4j](https://avatars.discourse-cdn.com/v4/letter/t/958977/32.png) [@tr0psn4j](https://boards.straightdope.com/u/tr0psn4j)
#### Post date: [November 30, 2010, 9:50pm UTC](https://boards.straightdope.com/t/password-nonsense/562464/8 "2010-11-30T21:50:46Z")

</div>

And a captcha if you mess your password up even just once!

---

<div class="post-metadata">

### Author: ![Giles](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/giles/32/60_2.png) [@Giles](https://boards.straightdope.com/u/Giles)
#### Post date: [November 30, 2010, 9:59pm UTC](https://boards.straightdope.com/t/password-nonsense/562464/9 "2010-11-30T21:59:00Z")

</div>

At one character from each of these Unicode groups (and how you input them is your problem):

Aegean Numbers  
Alchemical Symbols  
Armenian  
Balinese  
Bopomofo  
Braille Patterns  
Byzantine Musical Symbols  
Cherokee  
Chess Symbols  
Coptic  
Cuneiform Numbers  
Devanagari  
Dingbats  
Domino Tiles  
Glagolitic  
Hangul Jamo  
Hiragana  
Inscriptional Pahlavi  
Khmer  
Lycian  
Lydian  
Mahjong Tiles

and I’m only half way through 🙂

---

<div class="post-metadata">

### Author: ![Mangetout](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/mangetout/32/19_2.png) [@Mangetout](https://boards.straightdope.com/u/Mangetout)
#### Post date: [November 30, 2010, 10:05pm UTC](https://boards.straightdope.com/t/password-nonsense/562464/10 "2010-11-30T22:05:13Z")

</div>

A randomly-assigned sketch by Leonardo Da Vinci

Gold leaf

One or more wavelengths of electromagnetic radiation

Dead pixels

An aroma or flavour

Ants

Lego bricks of at least two different colours and shapes

Antimatter

---

<div class="post-metadata">

### Author: ![Knorf](https://avatars.discourse-cdn.com/v4/letter/k/58956e/32.png) [@Knorf](https://boards.straightdope.com/u/Knorf)
#### Post date: [November 30, 2010, 10:06pm UTC](https://boards.straightdope.com/t/password-nonsense/562464/11 "2010-11-30T22:06:30Z")

</div>

Include a two-bar sung excerpt (on pitch and in the correct tempo) from anywhere in the tenor part of the “Hallelujah Chorus” from Handel’s _Messiah_.

Include DNA samples from both parents and all grandparents.

Must login in the presence of four armed witnesses, all vouched for by the Secret Service, U.S. Marine Corps, and TSA.

---

<div class="post-metadata">

### Author: ![kayaker](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/kayaker/32/441_2.png) [@kayaker](https://boards.straightdope.com/u/kayaker)
#### Post date: [November 30, 2010, 10:09pm UTC](https://boards.straightdope.com/t/password-nonsense/562464/12 "2010-11-30T22:09:25Z")

</div>

And if a call comes through the switchboard for you that caller ID identifies as “wikileaks” you are in major shit.

---

<div class="post-metadata">

### Author: ![UncleRojelio](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/unclerojelio/32/3160_2.png) [@UncleRojelio](https://boards.straightdope.com/u/UncleRojelio)
#### Post date: [November 30, 2010, 10:10pm UTC](https://boards.straightdope.com/t/password-nonsense/562464/13 "2010-11-30T22:10:47Z")

</div>

Retinal scan while standing on a scale.

---

<div class="post-metadata">

### Author: ![Dallas\_Jones](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/dallas_jones/32/3277_2.png) [@Dallas\_Jones](https://boards.straightdope.com/u/Dallas_Jones)
#### Post date: [November 30, 2010, 10:11pm UTC](https://boards.straightdope.com/t/password-nonsense/562464/14 "2010-11-30T22:11:21Z")

</div>

Ain’t it wonderful, how safe our information is now? I spend a great deal of time logging on to post a few minutes worth of work several times per day.

Log on to computer, log on to Citrix and hope the system at the main office is up and running, log onto my personal desktop settings and do a little work. Phone rings or other distraction occurs. System time-out, you must now log back on through three levels of security and start again.

It’s slow, cumbersome, ineffective, but hey, it’s governement work. I seriously believe that most of my work day is spent, not in usefull work, but in logging on and off of our highly paranoid system.

---

<div class="post-metadata">

### Author: ![Czarcasm](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/czarcasm/32/4050_2.png) [@Czarcasm](https://boards.straightdope.com/u/Czarcasm)
#### Post date: [November 30, 2010, 10:15pm UTC](https://boards.straightdope.com/t/password-nonsense/562464/15 "2010-11-30T22:15:24Z")

</div>

A movie cell from _The Day The Clown Cried_  
A hair from Hitler’s missing testicle  
A Slinky made from Unobtainium  
A bottle of good French beer

---

<div class="post-metadata">

### Author: ![ReticulatingSplines](https://avatars.discourse-cdn.com/v4/letter/r/e274bd/32.png) [@ReticulatingSplines](https://boards.straightdope.com/u/ReticulatingSplines)
#### Post date: [November 30, 2010, 10:28pm UTC](https://boards.straightdope.com/t/password-nonsense/562464/16 "2010-11-30T22:28:16Z")

</div>

My account is so secure that I can’t even get into it myself half the time.

---

<div class="post-metadata">

### Author: ![Antinor01](https://avatars.discourse-cdn.com/v4/letter/a/ecae2f/32.png) [@Antinor01](https://boards.straightdope.com/u/Antinor01)
#### Post date: [November 30, 2010, 10:36pm UTC](https://boards.straightdope.com/t/password-nonsense/562464/17 "2010-11-30T22:36:44Z")

</div>

Voice authentication. Which must be german, but spoken in French. Ask the most interesting man in the world for advice on accomplishing this.

---

<div class="post-metadata">

### Author: ![running\_coach](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/running_coach/32/15836_2.png) [@running\_coach](https://boards.straightdope.com/u/running_coach)
#### Post date: [November 30, 2010, 11:19pm UTC](https://boards.straightdope.com/t/password-nonsense/562464/18 "2010-11-30T23:19:27Z")

</div>

A hazy shade of winter.

---

<div class="post-metadata">

### Author: ![ZenBeam](https://avatars.discourse-cdn.com/v4/letter/z/3ab097/32.png) [@ZenBeam](https://boards.straightdope.com/u/ZenBeam)
#### Post date: [November 30, 2010, 11:33pm UTC](https://boards.straightdope.com/t/password-nonsense/562464/19 "2010-11-30T23:33:55Z")

</div>

It has come to our attention that Computer Scientists and Mathematicians have proven that the maximally secure password (MSP) is b&f4g^6k(9s#dQ.:.  
As of this notice, all employees are required to immediately change their password to the MSP.

Passwords must be changed every 30 days. Since there is only one MSP, when your password expires, you must notify IT, who will reset your password to your employee number. You will then be required, at first logon, to reset your password to the MSP.

---

<div class="post-metadata">

### Author: ![Icarus](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/icarus/32/72_2.png) [@Icarus](https://boards.straightdope.com/u/Icarus)
#### Post date: [December 1, 2010, 12:14am UTC](https://boards.straightdope.com/t/password-nonsense/562464/20 "2010-12-01T00:14:25Z")

</div>

A bout of deja vu  
Snot in the back of the throat  
A cute picture of a kitten  
A John Cage composition played on roasted marshmallows

[Next page](https://boards.straightdope.com/t/password-nonsense/562464.md?page=2)
