"... will be changing the Password History settings by the end of this month. With this change, you will not be able to set your password to any of your 24 previously-used passwords." Seriously? 24? WTAF?
2
Have this organisation not heard of best practice?
2
1
Clearly not. You'll just have to change your single-digit-at-the-end to two. How annoying.
1
1
I had a client once who, once a month, forced a password change with a 15 password reuse limit. So once a month I logged in, set my password to 'Insecure01' thence 'Insecure02' onward to 'Insecure15' and then back to my good password which I never knew because yay password safe.
1
1
I confess I hadn’t thought of that. It’s tempting, though I fear for the SSO gubbins we use.
1
Replying to @arafel2 @dickontoo
What I particuarly enjoyed was that yes, changes needed to be spaced out so their SSO etc didn't cock up. As such those 16 password changes took around 45 minutes in total. Always good to charge the client for an hour of wasted time.

Oct 19, 2021 Β· 2:06 PM UTC
1