On Sun, 2024-01-21 at 16:39 -0800, ToddAndMargo via users wrote:
I needed a password eight characters long I picked "Snow White and the Seven Dwarfs".
Okay, that was a "Dad Joke" but it probably is a really strong password and easy to remember. I recommend run on phrases to my customers. When I make them up for them, I often use a phrase that flatters their business. Those they never forget.
I had to pick one for a store credit card when they forced us to do something on-line with it (after many years of having it without any on-line services), and went with something along the lines of "this service really sucks."
Then, when it went haywire one day I had to tell telephone support the password to sort things out. Embarrassing, and quite satisfying at the same time.
Services should really have two passwords, one for you to use online and another for you to say to technical support to prove it's you. Technical support SHOULD NEVER identify person by date of birth and phone number or street address.
We really need some agency we can report services to who have such crap security that you just know they're going to be hacked and it's going to compromise you. Maybe then we'd have far less bulk data thefts if there actually were consequences for being slack, consequences before it's too late, and they were forced into doing things better. It seems like there's a huge one every month around here.