Project Talk:Infrastructure/Password policy

Note
Before creating a discussion or leaving a comment, please read about using talk pages. To create a new discussion, click here. Comments on an existing discussion should be signed using ~~~~:

A comment [[User:Larry|Larry]] 13:52, 13 May 2024 (UTC)
: A reply [[User:Sally|Sally]] 00:48, 27 July 2024 (UTC)
:: Your reply ~~~~

Navigate to first

Open discussion
Good first discussion
Discussion needing discussion
Discussion needing help
Solved discussion

Talk status

This discussion is still ongoing.

I think we need to decide on a couple of things:

Advice on generating the master password. I'm generally good with the xkcd advice; but I've also had success using longer computer generated passwords. My ability to remember a password is primarily related to use-rate.
Advice on rotating passwords. I'd explicitly avoid rotating the master password outside of a breach.

— The preceding unsigned comment was added by ‎Antarus (talk • contribs)

We should avoid rotating passwords https://www.wired.com/2016/03/want-safer-passwords-dont-change-often/ --Jonas Stein (talk) 23:51, 13 October 2018 (UTC)