Re: Most secure way to reset a password via email link [message #185170 is a reply to message #185169] |
Thu, 06 March 2014 00:30 |
Geoff Muldoon
Messages: 19 Registered: July 2011
Karma:
|
Junior Member |
|
|
tnp(at)invalid(dot)invalid says...
>
> On 05/03/14 23:51, Richard Yates wrote:
>> On Wed, 05 Mar 2014 14:26:21 -0700, Chuck Anderson
>>> I think this kind of thing (and requirements on password strength)
>>> create a security problem of their own by forcing people to record this
>>> information somewhere and then keep it handy.
>>
>> Yes!!! The standard recommendations to users about passwords are
>> simply contradictory or impossible to follow. Based on my brief
>> experience dealing with others' passwords I believe that, with a few
>> exceptions, everybody either writes them down or uses the same one in
>> multiple places.
>>
>> Personally I confess that I do both.
>>
>> There's gotta be a better way.
>>
> have a file full of passwords and encrypt THAT with a secret key
http://keepass.info/
|
|
|