To think that websites could hint to you about passwords

[LadyOfTheCanyon]

Like a lot of people I'm sure, I have a selection of similar passwords that I use for non essential sites (not ones that store credit card details or personal info)

Why don't companies put a hint on their login page? i.e password needs one upper case, one lower case and a number kind of thing to save me about six attempts of frustrated stabbing before finally clicking on the 'I'm a numpty who forgot my password' button which then sends me an email to take me to a place where I can choose a new password.

I don't WANT a new password, I just need a reminder as to which one of the ten or so possibilities I've used in the past. Because I don't always remember to change the randomly generated password they email you and so this can happen ad infinitum until I throw the laptop across the room.

Is it just me or does everyone else use complicated passwords as standard?

Just use a password keeper! Google '1Password'

You won't need passwords soon, they're on their way out so the annoyance will soon be a thing of the past :)

What?? What?? That is brilliant news. On both counts!

reminds me of the meme:
Enter password: wrong
Enter password: wrong
Enter password: wrong
reset password : can't use old password!

"Why don't companies put a hint on their login page?" - Because those hints would help hackers.

Safari

Hackers are welcome to hack my 'account' at Muller yoghurts and Dolmio where I keep no info of any interest whatsoever.

LadyOfTheCanyon A tip that might work as a "hint" is to actually click "Register new account" (or equivalent). Scroll down to the password area and it will tell you what format the password has to be in to be valid. This might prompt you into remembering and saves time doing the "Forgot my password" crap.

Also, as we are ranting about passwords, does anyone else hate that on the iPhone it asks you whether you want to save your password BEFORE it lets you know whether the password is right or not? Winds me right up!

Another vote for LastPass

Thanks Mission that's a great idea. And yes to the iPhone password save. "Not Now" is the only answer I can give and then I

Oops posted to soon

...and then I never go back and update

LastPass sounds the same as 1Password, the latter is free :)

This is an argument in favour of Lastpass

Last pass is also free and excellent. There is a paid version that gives you an app that auto fills pages for you, I love it!

All that you're doing by using a password app is transferring all the risk onto one single point of failure. You're better off just getting the password reset every time you need it, and not even attempting to keep it.

Getting the password reset every time, apart from being a huge pain, will generally involve having to log into your email to retrieve the reset password - so it's still a "single point of failure": Anyone who gets your email password can change it, then reset your other account passwords. It also means that your passwords are sitting in emails, unless you change them every time you log into a website.

Password managers are much more convenient.

Yeh, I'm a password manager convert. I use Dashlane, it's another free option.

Listen to 'The Russian Passenger' episode of the podcast Reply All and you'll never think twice about skimping on password security for convenience:

gimletmedia.com/episode/91-the-russian-passenger/

I use Keepass. It's a bit clunky to be honest, but it does the job.

Yes, the 'master password' for a password manager becomes a single point of failure, but you can much more easily make it strong and still remember it because it's just one password.

Totally with you Doob

Password apps are highly dodgy. And saying PWs are on the way out is bollocks too. Can't insist on bio passwords without making it the Stazi

WEBSITE: Please enter your new password.
USER: cabbage
WEBSITE: Sorry, the password must be more than 8 characters.
USER: boiled cabbage
WEBSITE: Sorry, the password must contain 1 numerical character.
USER: 1 boiled cabbage
WEBSITE: Sorry, the password cannot have blank spaces.
USER: 50fuckingboiledcabbages
WEBSITE: Sorry, the password must contain at least one upper case character.
USER: 50BLOODYboiledcabbages
WEBSITE: Sorry, the password cannot use more than one consecutive upper case character.
USER: 50BloodyBoiledCabbagesShovedUpYourAss!
WEBSITE: Sorry, the password cannot contain punctuation
USER: 50FuckingBoiledCabbagesShovedUpYourAssIfYouDontGiveMeAccessNow
WEBSITE: Sorry, that password already in use.

YANBU. This drives me shitless too. Who the fuck cares if my 'username and password' for a website I have no financial link to (yes, dare I say it, MN, I'm looking at you too) is hacked? Although mostly they are of the stupid mailing list variety.

Dan

ROTFL but...

The last one would likely exceed character length

margot best to have categories of passwords, with your primary and financial very well secured but lower cat crappy stuff just a variation on a theme

Dan that's bleddy hilarious