Password creation method revised?

[xairbusdriver]

When users change their passwords every 90 days, they often aren't dramatically changing the password, Grassi says.

"I'm pretty sure you're not changing your entire password; you're shifting one character," he says. "Everyone does that, and the bad guys know that."

Well, they do now!! Thanks a lot Mr. Grassi! Guess I'll have to start changing two letters!!!

The new Guidelines are published here: https://pages.nist.gov/800-63-3/sp800-63b.htm CAUTION! Reading this manual will cause severe eyelid drooping and may cause neck injury from sleep induced head falling!! Please have a responsible adult carefully watch you for signs of boredom!!

No responsible adult available? How about reading a report in a much shorter and sixth grade English: All-Tech Considered story

I wondered why this 'news' seemed a bit late, I'd swear I'd read about it earlier this year. This article explains why it's getting some attention, again:?Much of what I did I now regret,? [former NIST manager Bill Burr] the now-retired 72-year-old told The Wall Street Journal.

For those who prefer graphical guides, I offer this: Password Strength

With my limited vocabulary and decreasing memory cells, I'm sticking with my password manager! But it wouldn't hurt to start creating multi-word pass phrases instead of the random characters it usually offers.

[TechnoMonkey]

Your All-Tech considered story link was a bit in err.

http://www.npr.org/sections/alltechconsidered/2017/08/14/543434808/forget-tough-passwords-new-guidelines-make-it-simple

[xairbusdriver]

Thanks, I corrected it.

[Blicj11]

Everyone should use a password manager. There are at least two really good ones: LastPass and 1Pass. Or you could just write them down on a piece of paper and keep it next to your computer like someone to whom I am married but should not identify by name, and whom I dearly love.

[TechnoMonkey]

I use last pass for everything but my financial passwords.  I do not trust anyone with those.

[Steve]

Or you could just write them down on a piece of paper and keep it next to your computer like someone to whom I am married but should not identify by name, and whom I dearly love.

I met that person last year. And you met one who matches that exact description, despite having 1Password on her computer...

[Blicj11]

Hahahaha. We were both in good company that day.

[Steve]

Hahahaha. We were both in good company that day.

[dfw_pilot]

Another vote for 1Password. Strong passwords made easy.