My old boss made us use a password manager, but my new one just tells us to 'make them strong'.

At my last job in Chicago, they forced us to use a password manager like Bitwarden for everything. I hated it at first, but after six months, I saw the point. Every site had a unique, long password, and I only had to remember one master phrase. Now I'm at a new place where the policy is just 'use strong passwords' and write them down if you have to. It's a mess. People reuse the same password with a number change, and I've already seen two sticky notes with logins stuck to monitors. The manager approach cuts out human error in a way a vague rule never can. Has anyone else had to push back on a weak company password policy?

2 comments

2 Comments

taylorpatel11d ago

Yeah, that "strong password" rule is basically just asking for trouble, isn't it? It's like telling people to be careful but giving them a banana peel to walk on. You can't fix human nature with a suggestion.

the_mary11d ago

Actually, @taylorpatel, it's a basic safety step.