Change Passwords Every Three Months & 2FA

[Forvendet]

I maintain a couple online share trading accounts. I'm not a frequent trader. I trade occasionally and usually hold shares for months, some even years. There're two stockbroking firms that insisted on changing passwords every three months. How am I going to generate and remember so many different passwords and remember them from time to time? I write in to them but they insisted that it's online security policy. Some other stockbroking firms don't require that, so I closed accounts and switched over. Another bothersome practice is the 2FA token required for online banking. Are these really necessary? All views and opinions welcome.

 

[po2wq]

dat change password thingy ... me running out of passwords oredi ... dunno can recycle passwords oni after how long ...


dat 2fa thingy ... 4 sum banks, 2 passwords r stil no enuff ... dey even want 2 sms u 1 mor password b4 u can transact ...

look @ it from another angle ... if got oni 1 password required, if sum1 hack in2 ur a/c n transfer out moni, wud u call up ze bank n kpkb n f**k dem? ...

 

[middaydog]

you can alternate between forvendet and tednevrof every other month

 

[Forvendet]

dat change password thingy ... me running out of passwords oredi ... dunno can recycle passwords oni after how long ...

you can alternate between forvendet and tednevrof every other month

Can't alternate passwords, used passwords won't be accepted. And yes, ran out of passwords, sick and tired of calling them up to reset and resend. :(

 

[po2wq]

Can't alternate passwords, used passwords won't be accepted. And yes, ran out of passwords, sick and tired of calling them up to reset and resend. :(

you can alternate between forvendet and tednevrof every other month

me now in2 my 4th password oredi ... dunno nax 1 can use back my very 1st password anot ... :o

 

[po2wq]

Can't alternate passwords, used passwords won't be accepted. And yes, ran out of passwords, sick and tired of calling them up to reset and resend. :(

have u tried tis ...

forvendet1 ... forvendet2 ... forvendet3 ...

 

[middaydog]

then you can go _ abcdef, ghijkl, until finish the cycle then the next cycle shall be _ abcdefg, hijklmn, _ _

this will last you quite some years

 

[Forvendet]

have u tried tis ...

forvendet1 ... forvendet2 ... forvendet3 ...

then you can go _ abcdef, ghijkl, until finish the cycle then the next cycle shall be _ abcdefg, hijklmn, _ _

this will last you quite some years

Yes, good ideas, thanks. I'll try _01, _02, _03 etc. if my current brokers impose that too. But there's no getting away from that banking 2FA.

 

[vamjok]

lol i faced this issue in my prev work places as well. beside 01 02 03 04, another common practice is a, b c d behind the usual password you use.

 

[Ramseth]

Yes, good ideas, thanks. I'll try _01, _02, _03 etc. if my current brokers impose that too. But there's no getting away from that banking 2FA.

I think it's a Singapore culture kiasu and kiasi thing. I've never heard of compulsory change of passwords (advisory, yes) or 2FA tokens anywhere abroad. (Those who have, please correct and enlighten me.) Anyway, what to do? We're in Singapore and need the online stockbroking and banking services.

 

[annexa]

I stopped online banking after they come out with the 2 FA thing. Fucking troublesome.

 

[KNNBCCB]

For higher safety purposes...

1. Get a good internet securities.
2. Use Mozilla. I don't trust IE.

 

[Thick Face Black Heart]

I think it's a Singapore culture kiasu and kiasi thing. I've never heard of compulsory change of passwords (advisory, yes) or 2FA tokens anywhere abroad. (Those who have, please correct and enlighten me.) Anyway, what to do? We're in Singapore and need the online stockbroking and banking services.

Change password has no effect on security, because most security breaches are caused by people:

(a) knowingly giving their password to other people

(b) OR, revealing their password in response to phishing scam

As long as people keep falling for phishing scam or share password, no amount of change password procedure will help them.

 

[silverfox@]

me now in2 my 4th password oredi ... dunno nax 1 can use back my very 1st password anot ... :o

I only use 2 passwords. 1st one expire use 2nd one. 2nd one expire use 1st one.

 

[silverfox@]

I stopped online banking after they come out with the 2 FA thing. Fucking troublesome.

2FA is because hackers can phish out your user n password from your computer through a connection. That is why a need for 2 FA. Why would banks want to make things difficult for themselves if things are so simple as we think it is?

 

[Unrepented]

AAA to ZZZ, got how many permutations Problem is not "ran out of passwords" but your brain is failing you.:o

Can't alternate passwords, used passwords won't be accepted. And yes, ran out of passwords, sick and tired of calling them up to reset and resend. :(

 

[Leongsam]

How am I going to generate and remember so many different passwords and remember them from time to time?

1) Use a password generator http://strongpasswordgenerator.com/

2) Store your password in a protected folder so you don't have to remember it.