Why Passwords Suck
Passwords have become ubiquitous. We can’t get away from them, as security systems have come to depend on them as an authentication/access control method. However, the password system is an exceedingly poor method of securing anything.
It’s a simple fact that the canonical “password” password is a lot easier to remember than “X8!^djDm=§”. At the end of 2009, Twitter released a list of 370 passwords they had banned from use in their service due to commonality. Are any of your passwords listed?
Furthermore, the most common effort to remedy this problem creates further disincentive to make good passwords. You’ve probably dealt with the frustration of inane password requirements like a certain number of upper case characters or special symbols. Policies like these frustrate users and lead to other problems.
This basic fact leads to several problems. On the business side, this leads to a loss in productivity. Not only is the user unable to access essential resources, it also demands further resources of the IT person charged with resetting the password.
Although passwords securities have been updated many still have issues with them whether it be forgetting them only to reset them overtime or being too difficult as some sites have said to be so easy to use.
BUT
Enough from us talking about it our friend Mickey Elliott has the same thoughts about why passwords to do in many terms suck.
