My old boss made us use a password manager, but my new one just tells us to 'make them strong'.

At my last job in Chicago, they forced us to use a password manager like Bitwarden for everything. I hated it at first, but after six months, I saw the point. Every site had a unique, long password, and I only had to remember one master phrase. Now I'm at a new place where the policy is just 'use strong passwords' and write them down if you have to. It's a mess. People reuse the same password with a number change, and I've already seen two sticky notes with logins stuck to monitors. The manager approach cuts out human error in a way a vague rule never can. Has anyone else had to push back on a weak company password policy?

3 comments

3 Comments

taylorpatel2mo ago

Yeah, that "strong password" rule is basically just asking for trouble, isn't it? It's like telling people to be careful but giving them a banana peel to walk on. You can't fix human nature with a suggestion.

knight.diana1mo agoMost Upvoted

Look, I get what you're saying. But here's the thing - are you really saying people shouldn't have to try at all? That's like saying seatbelts are useless because people still crash. The rules exist for a reason. Yeah, passwords are a pain. But the alternative is getting hacked and losing everything. So what's your actual solution then? Just let everyone use "password123" and hope for the best?

the_mary2mo ago

Actually, @taylorpatel, it's a basic safety step.