erudity.net prattlings on via nattering nabobs

Password rules

Today at work a website that a buddy frequently uses updated their password criteria and expired his old password.  He had been trying to make a new password for about 45 minutes when I looked at the new critera...

• Passwords must be changed every 60 days.
• Passwords must be at least 15 characters long.
• Passwords can only be changed once in a 24-hour period.
• Passwords cannot contain English words of 3 or more letters.
• Passwords cannot have consecutive identical characters.
• New passwords must differ from the previous password by at least 4 characters.
• Spaces are not allowed at the end of a password.
• Passwords must have at least the following:
  • Two or more upper case letters
  • Two or more lower case letters
  • Two or more numeric digits
  • Two or more special characters.

This makes passwords almost impossible to memorize - especially the English word of 3 or more characters part.  Awesome!