Is Mandatory Frequent Password Changing at Universities Effective or Overkill?

[Moonbear]

Our IT requires those sorts of frequent password changes too. I also do as Ivan suggests, and just keep changing a number in the password sequentially, except on the account that only uses a 6 character password...EXACTLY. That one is annoying...not 6 to 8, not at least 6, but exactly 6. I'm starting to run out of ideas for that one.

I like CSFITSUCKS! as a password though...I may need to adapt that one locally on the account that I always have to call for password resets on. As if the IT people don't hate me enough already.

 

[TheStatutoryApe]

When I worked at Brooks College we had to change our passwords every few months too. Fortunately the IT department never wanted to have to deal with anything that they had not decided to do themselves so they made it easy on us and we could switch back and forth between two passwords.

I like the idea of a small RFID device implanted in the hand, which will allow you to log onto the companies computers. Each one has its own profile, and the IT people can set it up as to what your access is.

It would have to be a device instead of just a tag. The code would likely need to be changed frequently unless they have figured out a way to keep third parties from scanning tags.